SPECIFICATION OF ENFORCEMENT POINT IN FIREWALL RULE

摘要

PROBLEM TO BE SOLVED: To provide an improved firewall solution.;SOLUTION: Some embodiments of the invention provide a novel method for specifying firewall rules. In some embodiments, the method provides the ability of specifying a particular firewall rule and a set of network nodes (also called as a set of enforcement points below) at which the particular firewall should be enforced. To provide this ability, the method of some embodiments adds an extra tuple (referred to as an applied-to tuple below) to the firewall rule. This added applied-to tuple lists the set of enforcement points at which the firewall rule must be applied (i.e,, enforced).;COPYRIGHT: (C)2015,JPO&INPIT