Patent ID: 8099500

Claim:
A method of setting connection policies for a plurality of network paths from a first endpoint to a second endpoint, the method comprising: receiving, by a server, a first set of candidate network addresses of the first endpoint and a second set of candidate network addresses of the second endpoint; generating a plurality of candidate network address pairs, wherein each of the plurality of candidate network address pairs comprises a candidate network address of the first set of candidate network addresses paired with a candidate network address of the second set of candidate network addresses; associating a network path with each candidate network address pair of the plurality of candidate network address pairs; setting a connection policy for each associated network path of the plurality of associated network paths; receiving session data comprising information regarding a requested session between the first endpoint and the second endpoint; identifying an allowable network path, comprising one of: determining that at least one associated network path has a connection policy supporting the requested session; and determining that none of the plurality of associated network paths has a connection policy supporting the requested session between the first endpoint and the second endpoint, wherein identifying the allowable network path further comprises: receiving revised session data comprising revised information regarding the requested session between the first endpoint and the second endpoint, and determining that at least one associated network path has a connection policy supporting the requested session; upon identifying the allowable network path, establishing the requested session between the first endpoint and the second endpoint using the allowable network path; and monitoring the established requested session to determine compliance with the connection policy associated with the allowable network path used for the established requested session.