Patent ID: 8640218

Claim:
A computer program product for managing a firewall for a first server having a copy of a first application and a copy of a second application, the first server added to a server cluster comprising second and third servers, the second server having a copy of the first application and a copy of the second application, and the third server having a copy of the first application but not a copy of the second application, the computer program product comprising: one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more storage devices, the program instructions comprising: first program instructions to (a) identify first rules of permitted message flows through the firewall to the second and third servers for respective copies of the first application installed in the second and third servers, and (b) identify a second rule of permitted message flow through the firewall to the second server for the second application installed in the second server; and second program instructions, responsive to (a) the identification by the first program instructions of the first rules for both the second and third servers, to automatically generate a new rule for the firewall for a permitted message flow from a source IP address to a destination IP address of the first server, and (b) the identification by the first program instructions of the second rule for messages to the second application in the second server and the absence of a corresponding rule for messages to the third server for the second application indicating that the second application is not installed in the third server, to determine not to automatically generate another rule for the firewall for messages to the second application installed in the first server.