NETWORK SERVICE ZONE LOCKING

摘要

A zone locking system detects unauthorized network usage internal to a firewall (170). The system determines unauthorized network usage by classifying internal hosts (351-355, 357-359) inside a firewall (170) into zones (312, 314, 316). Certain specified zones(312, 314, 316) are unauthorized to initiate client communications with other selected zones (312, 314, 316). However, zone override services can be designated for each associated internal zone (312, 314, 316), and thus, authorizing selected network services. An alarm or other appropriate action is taken upon the detection of unauthorized network usage.