Patent ID: 11968177
Assignee: SALESFORCE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A system that provides verification of a firewall, comprising:
a timelord module executed on a processor and in operable communication with the firewall and configured to:
transmit random tokens to an external element responsive to a schedule task;
receive an updated policy ok signal from the external element, wherein the external element includes a processing system and a memory that stores programming instructions for execution by the processing system to: create an updated firewall policy that includes the random tokens and a change in a firewall policy, push the updated firewall policy to the firewall, and transmit the updated policy ok signal responsive to receiving a notification from the firewall;
respond to the updated policy ok signal by:
loading a first Hypertext Transfer Protocol (HTTP) attack from among a plurality of HTTP attacks, the first HTTP attack including a first expected response that is either forbidden or accepted and the random tokens in a form of a header key value parameter;
sending the first HTTP attack to the firewall;
comparing a response from the firewall to the first HTTP attack with the first expected response;
incrementing the first HTTP attack and repeating the loading, sending, and comparing until the plurality of HTTP attacks have been sent; and
delete the random tokens when the plurality of HTTP attacks have been sent.