Patent ID: 7886351

Claim:
A computer implemented method for a network aware firewall, the method comprising: accessing a first network through a first virtual network interface from a client computer system; determining whether the first network is a first network type or a second network type, the first network type different than the second network type; and creating a first set of security parameters associated with a first firewall local to the client computer system in response to determining whether the first network is the first network type or the second network type, wherein the first set of security parameters comprises a global security profile and a concurrently applied first network specific profile if it is determined that the first network is the first network type, and wherein the first set of security parameters comprises the global security profile and a concurrently applied second network specific profile if it is determined that the first network is the second network type, wherein the global security profile is different than the first network specific profile and the second network specific profile and wherein the first network specific profile is different than the second network specific profile, wherein creating the first set of security parameters comprises: comparing one or more global security parameters associated with the global security profile with one or more network specific security parameters associated with at least one of the first network specific profile and the second network specific profile, identifying a conflict between at least one global security parameter and at least one network specific security parameter, and resolving the conflict in favor of either the conflicting global security parameter or the conflicting network specific security parameter.