Patent ID: 9571507
Date: 2017-02-14
CPC Classifications: G06F,H04L

Claim:
1. A method for providing a virtual security appliance (VSA) architecture in a virtual network infrastructure, the method comprising: detecting a change for a guest virtual machine (VM) in the virtual network infrastructure, wherein the change comprises moving the guest VM from a first virtual server to a second virtual server of the virtual network infrastructure; determining a policy of one or more security policies requires a security control for the guest VM; determining whether there is an already present VSA configured as a VM capable of applying the required security control to the guest VM running in the second virtual server, wherein the applying comprises performing security inspections on network packets of a packet stream associated with the guest VM; upon determining there is not the already present VSA running in the second virtual server, performing a process comprising: upon determining there is the already present VSA running in the second virtual server, running the guest VM in the second virtual server and routing the packet stream associated with the guest VM through the already present VSA.