Patent ID: 9571451
Date: 2017-02-14
CPC Classifications: G06F,H04L

Claim:
1. A method for creating network isolation between virtual machines comprising: receiving, by a security virtual machine (SVM) agent on a managed system, an outgoing network packet from a virtual machine (VM); extracting source and destination data from the outgoing network packet, wherein the source data includes at least a source internet protocol (IP) address, a source media access control (MAC) address, and wherein the destination data includes at least a destination IP address, and a destination MAC address; searching a zone identifier table for a source entry including the source data from the outgoing network packet, and extracting a source zone identifier (id) from the source entry; searching the zone identifier table for a destination entry including the destination data from the outgoing network packet, and extracting a destination zone identifier (id) from the destination entry, based on the destination data being located in the zone identifier table; routing the outgoing network packet to a first physical Ethernet adapter connected to an internal switch, based on the source zone id matching the destination zone id; routing the outgoing network packet to a second physical Ethernet adapter connected to an external switch, based on the destination data not being located in the zone identifier table, and the source zone id not matching the destination zone id; and modifying one or more zone identifier table, by an SVM manager, wherein each zone identifier table corresponds to the managed system being managed by the SVM agent, and wherein the modifying further comprises;