System and method for configuring a computer system according to security policies

摘要

Method and system for configuration of a computer system according to security policies. The configuration of an employee's personal computer system according to the security policies of the corporate network provides for security of access to the corporate network. Configuration change instructions are generated according to the security policy and applied to the configuration of the computer system. The configuration system includes at least one computer system used to access a corporate network, a policy application module configured to determine configuration parameters of the computer system and to pass the configuration data to an instruction forming module. The computer system is configured according to the selected security policy by execution of at least one configuration change instruction. The configuration system also includes a database of security policies.

主权项

1. A computer-implemented system for automated configuration of a computer system according to a security policy, the system comprising:
at least one computer system having at least one installed application attempting to access a network; a policy application module configured to acquire configuration data from the computer system prior to the computer system being permitted network access; an instruction forming module configured to generate at least one configuration change instruction based on the configuration data provided by the policy application module; a security policies database accessible by the policy application module; an applications database accessible by the instruction forming module, wherein:
the instruction forming module generates at least one configuration change instruction and provides it to the policy application module; andthe policy application module executes the configuration change instruction on the computer system and implements a change in the configuration of an operating system of the computer system defined by the configuration change instruction,wherein the policy application module sends, to the computer system, a link for determination of a type and a state of the computer system,wherein the link points to a location of a control application configured to determine configuration of the computer system, andwherein the policy application module executes at least one configuration change instruction using the control application.