Patent ID: 7814543

Claim:
A network security system having a processor, a memory, and a storage medium storing computer executable instructions operative for protecting computing devices connected to a communication network from an identified security threat, the network security system comprising: a network security module interposed directly between all computing devices and the communication network such that the network security module selectively controls network activities between the computing devices and the communication network, and the network security module communicating with a security service module through the communication network, wherein the network security module is operable to receive information about a current configuration of a corresponding computing device from the computing device and to send a security information request based on the received current configuration information for the computing device through the communication network to a security service module, and wherein when the network security module is powered up, the network security module is configured to enter into a full lock-down state such that network activities between the computing devices and only trusted network locations are permitted; and the security service module, which is separate from the network security module and connected to the communication network, that receives the security information request that is based on the current configuration information of the corresponding computing device from the network security module and publishes security information for the network security module based on the security information request of the network security module, the security information comprising security measures that are based on the current configuration of the computing device, which, when implemented by the network security module, protect the computing device from an identified security threat to and from other computing devices connected to the communication network, wherein the security service module is configured to publish security bulletins over the communication network by a general broadcast.