Patent ID: 8056124
Filing Date: 2011-11-08
Classification: H04L

Abstract:
1. A method performed by a processor executing computer-executable instructions stored in a memory of a computer system configured to create a security policy for a firewall policy and a connection policy, the executed method further comprising: providing a user interface through which a user can specify security rules relating to the firewall policy and the connection policy; and automatically generating by the processor firewall rules and connection rules from the specified security rules, the security rules being higher level rules than the firewall rules and the connection rules, the generated firewall rules for input into a firewall engine and specifying addresses of computing devices that are authorized to send data to the computer system and the generated connection rules for input into an internet protocol security engine and specifying an authentication protocol for authenticating a computing device that sends data to the computer system and a confidentiality protocol and an integrity protocol for ensuring the confidentiality and integrity of data sent to the computer system wherein a connection rule specifies behavior of an IP security protocol and specifies key exchange, data protection, and authentication associated with a connection the connection rules being generated by, for each security rule,