INTEGRATED SECURITY MANAGEMENT

摘要

A system for configuring a plurality of security devices is provided. The system is configured to automatically generate one or more policy definition files and use the files to integrally control security configurations for a plurality of security devices in one or more networks. The system includes a security control module and one or more policy agent modules. The security control module converts security parameters to the one or more security policy definition files. The policy agent modules receive the security policy definition files and extract a plurality of policy configuration parameters from the security policy definition file. The plurality of policy configuration parameters is passed to the associated security devices. The security control module maintains communication with other components in the system, such as a checking module and a reporting module.

主权项

1. A system for configuring a plurality of security devices, the system comprising:
a security control module executable on a computing system to convert security parameters to a security policy definition file; and a policy agent module executable on the computing system to receive the security policy definition file and extract one or more policy configuration parameters from the security policy definition file, the one or more policy configuration parameters associated with one of the security devices.