Patent ID: 11916963
Assignee: JUNIPER NETWORKS, INC.
Field: nan (nan)
Classification: CPC nan | IPC G  H

Claim 11:
12. A method comprising:
storing, by a device associated with a first site in a network system, a security policy that specifies a segment-specific queryable resource associated with a second site in the network system, wherein the security policy is translated from an intent-based security policy specifying the segment-specific queryable resource associated with the second site;
querying, by the device in implementing the security policy, the segment-specific queryable resource associated with the second site;
receiving, by the device in response to the query, network segment prefixes associated with one or more network segments at the second site;
updating, by the device, a forwarding table of the device with the network segment prefixes associated with the one or more network segments at the second site received in response to the query; and
controlling, by the device and based on the updated forwarding tables, network traffic between the first site and the second site.