IP-free end-point management appliance

摘要

An aspect includes a method of receiving a management command in an appliance to configure a network security policy, where the appliance is connected to a network end-point device. The method includes receiving a packet from a security device. Checking is performed to determine whether the packet includes a specific identifier. Upon a determination that the packet received includes a specific identifier, the management command is retrieved from a payload of the packet to configure the appliance.

主权项

1. A method of receiving a management command in a network appliance to configure a network security policy, the network appliance connected to a network end-point device, the method comprising:
receiving, by the network appliance, a packet comprising an Internet protocol (IP) header from a security device, the IP header comprising a destination IP address comprising the IP address of the network end-point device and a source IP address comprising the IP address of the security device, wherein the destination IP address and the source IP address remain unchanged by the network appliance; checking and determining whether the IP header of the packet comprises a specific identifier, wherein the specific identifier is included in the IP header by the security device; retrieving, upon a determination that the packet received comprises the specific identifier, the management command from a payload of the packet to configure the network appliance; and preventing the network end-point device from receiving the packet comprising the management command.