Patent ID: 8892733
Filing Date: 2014-11-18
Classification: H04L

Abstract:
1. A method comprising: receiving a first set of addresses, each address in the first set of addresses corresponding to a network device in a first network zone to which a first virtual device has access, wherein an end point device comprises the first virtual device; receiving a second set of addresses, each address in the second set of addresses corresponding to a network device in a second network zone to which a second virtual device has access, wherein the end point device comprises the second virtual device; enforcing network zoning at the first virtual device by monitoring communications of the first virtual device and discarding communications of the first virtual device that do not include an address from the first set of address; and enforcing network zoning at the second virtual device by monitoring communications of the second virtual device and discarding communications that do not include an address from the second set of addresses; wherein the endpoint device, the network device in the first network zone, and the network device in the second network zone are communicatively coupled by a network; wherein the first set of addresses and the second set of addresses are generated by a zoning database module that is communicatively coupled to the end point device through the network.