Systems and methods for the rapid deployment of network security devices

摘要

A configuration service comprises a deployment package and a production configuration for a network security device. One or more configuration parameters of the production configuration may be defined by an administrator of the network security device (e.g., the customer). The network security device may be preconfigured with a network address and identifier. The network security device may be configured to automatically request and apply the deployment package at deployment time by use of the preconfigured network address and identifier. The network security device may automatically request and apply the production configuration from the configuration service in response to applying the deployment package.

主权项

1. A configuration service, comprising:
a security server configured to associate an identifier of a network security device with a deployment package, wherein the network security device comprises a persistent storage medium storing a preconfigured network address of the security server, wherein the network security device is configured to transmit a request for the deployment package to the preconfigured network address, wherein the request comprises the identifier of the network security device, and wherein the security server is configured to receive the request for the deployment package transmitted from the network security device to the preconfigured network address and to transmit the deployment package to the network security device in response to determining that the identifier of the request corresponds to the identifier associated with the deployment package; and a management server configured to associate the device identifier with a production configuration, the production configuration comprising a deployment-specific security policy comprising one or more deployment-specific configuration parameters for the network security device, wherein the management server is configured to provide the production configuration to the network security device in response to a request from the network device comprising the credential of the deployment package.