Deploying policy configuration across multiple security devices through hierarchical configuration templates

摘要

Deploying policy configuration across multiple security devices through hierarchical configuration templates is disclosed. In some embodiments, deploying policy configuration across multiple security devices through hierarchical configuration templates for configuring a plurality of security devices includes receiving at a first security device a hierarchy of templates from a central management server, in which the hierarchy of templates includes configuration information for a group of security devices, and in which the first security device is included in the group of security devices; and reconciling on the first security device's configuration information included in the hierarchy of templates and device specific configuration based on local configuration information, in which the first security device performs an object level reconciliation to maintain device configuration consistency.

主权项

1. A system for configuring a plurality of security devices, comprising:
a processor configured to:
receive a configuration input for a hierarchy of templates; andimplement central configuration management for the plurality of security devices using the hierarchy of templates that facilitates device specific configuration based on local configuration information and template override of template based configuration information, wherein the implementing of the central configuration management for the plurality of security devices comprises:
for each security device:
in the event that local configuration information conflicts with configuration information of a template, determine whether a priority of the template is higher than a priority of an object associated with the each security device; andin the event that the priority of the template is higher than the priority of the object associated with the each security device, override the local configuration information with the configuration information of the template; and a memory coupled to the processor and configured to provide the processor with instructions.