Patent ID: 11870814
Assignee: FORTINET, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G  Y | IPC G  H

Claim 18:
19. A method for protecting an enterprise network, the method comprising:
a system comprising one or more processors and memory that are remote from the enterprise network:
controlling at least one of: (a) communications to and from the enterprise network according to a set of security policies, and (b) endpoint to endpoint connections within the enterprise network according to the set of security policies, wherein controlling endpoint to endpoint connections comprises receiving connection escalation requests from endpoint agents and replying to the connection escalation requests with responses that comprise actions for handling connections that are based on the set of policies, the endpoint agents running on endpoint devices;
receiving a request for modifications to one or more policies of the set of policies;
automatically generating a policy digest formatted according to a predefined format, the policy digest comprising the modifications;
generating, based upon the policy digest, one or more components within the enterprise network that control at least one of: (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network;
modifying, based on the one or more calls, of at least one of: (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network; and
wherein the communications for the enterprise network is routed through one or more perimeter points of presence and the one or more calls are one or more calls for modification of a security stack implemented by the one or more perimeter points of presence.