Patent ID: 11924168
Assignee: GOOGLE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
obtaining a traffic log for a network comprising one or more virtual machines, the traffic log comprising network communications by the one or more virtual machines of the network;
obtaining a set of firewall rules for the network;
identifying, using the traffic log and the set of firewall rules, overlapping firewall rules comprising a first firewall rule of the set of firewall rules that completely overlaps a second firewall rule of the set of firewall rules;
generating a firewall rule recommendation based on identifying the overlapping firewall rules, wherein the firewall rule recommendation comprises a recommendation to delete a respective one of the overlapping firewall rules; and
transmitting the firewall rule recommendation to a user device.