Patent ID: 8341739
Filing Date: 2012-12-25
Classification: H04L

Abstract:
1. A computer-implemented method of managing network security, said method comprising: receiving sampled packets at said computer at a first location, wherein said sampled packets represent packets being sampled from network packet traffic in at least one second location in a network; converting said sampled packets into an appropriate format for analysis to form converted packets; sending said converted packets to a first group including at least one security device for analysis at a third location; receiving at said first location an event message from said at least one security device if said event message is generated by said at least one security device as a result of analysis of said converted packets; evaluating at said first location said network security based on said event message and security policies wherein said evaluating is knowledge based; and adjusting at said second location said network security based on said evaluation of said network security wherein said second location and said at least one security device are a part of a closed loop that comprises a feedback path free of intermediate network access, wherein said adjusting said network security comprises automatically notifying a network administrator concerning network security adjustment; and if said network administrator approves said network security adjustment, automatically implementing said network security adjustment.