Patent ID: 8739269
Filing Date: 2014-05-27
Classification: H04L

Abstract:
1. A method for providing security in a virtual private network, comprising: defining, by a processor of a customer edge router, a protected server group, wherein the protected server group identifies a subset of all customer endpoint devices in the virtual private network, wherein the subset includes a server within the virtual private network to be protected; receiving, by the processor, a packet; applying, by the processor, an inbound access control list to the packet if the packet is destined to a server in the protected server group, wherein the inbound access control list comprises an inbound list of internet protocol addresses that may not be accessed by the protected server group, wherein the applying inbound access control list comprises: applying, by the processor, the outbound access control list to the packet if the packet is from the server in the protected server group, wherein the outbound access control list comprises an outbound list of internet protocol addresses that the protected server group may initiate a session with, wherein the applying the outbound access control list comprises: