Patent ID: 9300691
Filing Date: 2016-03-29
CPC Classification: H04L

Claim Text:
1. A computer-implemented method for enforcing secure network segmentation for sensitive workloads, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a sensitive workload that is deployed within a subnet of a segmented network that is segmented within a remote workload hosting platform; identifying a security policy that applies to the sensitive workload, wherein a deployment of the sensitive workload within the subnet of the segmented network complies with the security policy; intercepting, at a proxy outside the segmented network, an attempt from outside the segmented network to reconfigure the deployment of the sensitive workload within the segmented network on the remote workload hosting platform, wherein the attempt to reconfigure the deployment of the sensitive workload comprises an attempt to move the sensitive workload from the subnet to an additional subnet within the segmented network; determining that the attempt to reconfigure the deployment of the sensitive workload could result in a violation of the security policy based on a conflict between a configuration of the additional subnet and the security policy that applies to the sensitive workload; enforcing, on the proxy, the security policy on the attempt to reconfigure the deployment of the sensitive workload.