Patent ID: 9621592
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A method, comprising: retrieving, from a memory accessible by a computer, a document comprising a workload definition document that defines an intended virtual configuration to include at least one virtual machine and at least one network appliance to be associated with at least one of the virtual machines in the intended virtual configuration, each network appliance respectively serving a role in the intended virtual configuration of transforming, inspecting, filtering, or otherwise manipulating all network traffic, before said network traffic reaches an intended virtual machine, for purpose other than a data packet forwarding in a virtual configuration; parsing, using a processor on the computer, the workload definition document to extract attributes of each of the network appliances, including one or more security policies to be applied to each network appliance; extracting configuration data from the parsed workload definition document that are related to any security policy of any of the network appliances to be deployed; accessing a security template library to select a security template for each network appliance that will implement the one or more security policies for that network appliance to be deployed; retrieving a base image for each network appliance to be deployed; merging deployment-specific data from a snapshot taken from each network appliance with the a base image; and configuring each network appliance with at least one selected security template.