Patent ID: 8943575
Filing Date: 2015-01-27
Classification: H04L

Abstract:
1. A method of managing access to resources on a secured network using a plurality of access rules, comprising reading packet information in respective packets of a packet communication received at a security node; applying an access rule of the plurality of access rules; determining whether the security node is to block the respective packets or the packet communication from reaching one or more of the resources on the secured network based on the applied access rule; if (i) the applied access rule is a simulated access rule and (ii) the security node is to simulate blocking the respective packets or the packet communication from reaching the one or more resources based on the applied simulated access rule, the security node: (1) passing the respective packets or the packet communication towards the one or more resources on the secured network; and (2) generating a log event that indicates blocking of the respective packets or the packet communication by the security node, and changing the simulated access rule or an order of the access rules to reduce an amount of over-blocking or under-blocking determined based on the log event, wherein over-blocking occurs if appropriate access to a protected resource is blocked by an access rule, and under-blocking occurs if inappropriate access to a protected resource is not blocked by the access rule.