Patent ID: 8528041

Claim:
A computer-implemented method to manage network security, the computer implemented method comprising: generating network resource access control lists that limit access to network resources by network clients and network client access control lists that limit network client communication or functionality available at each of the network clients, wherein the network resources and the network clients are connected to a telecommunication network; transmitting the network resource access control lists to the network resources over the telecommunication network; and transmitting the network client access control lists to the network clients over an out-of-band interface that is separate from an interface to the telecommunication network, wherein the telecommunication network comprises a trusted network and an untrusted network and both of the network resource access control lists and the network client access control lists are used to check intra-trusted network communications among the network resources and the network clients that are part of the trusted network and to prevent unauthorized communications among the network clients connected on the telecommunication network.