Patent ID: 8631123

Claim:
A method comprising: determining a domain associated with a connection request responsive to receiving at a local machine the connection request from a remote machine, wherein the domain represents an organizational entity and the connection request comprises a logical network port identifier; accessing a set of domain isolation rules in an operating system space of the local machine; determining that the set of domain isolation rules comprises a domain isolation rule that governs a range of logical network port identifiers that comprise the logical network port identifier; determining whether the domain associated with the connection request is a permitted domain for the range of logical network port identifiers according to the domain isolation rule; determining if a local process is bound to a local logical network port identified with the logical network port identifier; denying the connection request if the domain associated with the connection request is not a permitted domain for the range of logical network port identifiers according to the domain isolation rule; allowing the connection request if the domain associated with the connection request is a permitted domain for the range of logical network port identifiers according to the domain isolation rule; wherein said allowing the connection is also dependent on determining that the local process is bound to the local logical network port determining that the local process is associated with a second domain responsive to the local process attempting to bind to the local logical network port; determining that the set of domain isolation rules comprises a second domain isolation rule corresponding to a second range of logical network port identifiers that comprise the logical network port identifier and that the second domain isolation rule indicates that the second domain isolation rule applies to local processes, wherein the domain isolation rule governs remote connection requests and the second domain isolation rule governs local processes; determining that the second domain is a permitted domain for the second range of logical network port identifiers; and allowing the local process to bind to the logical network port identifier.