Secure firewall configurations
US-2019081983-A1 · Mar 14, 2019 · US
US11038779B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11038779-B2 |
| Application number | US-201916529838-A |
| Country | US |
| Kind code | B2 |
| Filing date | Aug 2, 2019 |
| Priority date | Aug 20, 2015 |
| Publication date | Jun 15, 2021 |
| Grant date | Jun 15, 2021 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A self-service experience for a change requester is provided. Authorized endpoint changes are identified along with corresponding change types. Resource attributes are identified and corresponding parameters of the resources are changed according to change window requirements. Where the changes comply with business policies, the changes are executed.
Opening claim text (preview).
What is claimed is: 1. A computer-implemented method for performing server change management, the method comprising: receiving a change request made by a requester, the requester having an identity corresponding to an authorization, with respect to server changes, to only request changes for a set of endpoints associated with an application, the set of endpoints being within an enterprise system having managed endpoints; identifying certain endpoints of the set of endpoints that will be changed according to the change request, the certain endpoints being available to the requester according to the authorization for making the requested change, the certain endpoints including a first endpoint; identifying from within a set of possible change types, a subset of change types including a first change type that may be performed on the first endpoint based on a governing policy; retrieving a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint; determining a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes; identifying change window requirements for the first change type based on the set of change parameters; evaluating compliance of the set of change parameters with a set of business policies; determining that the first change type is a safe change capable of being performed outside of a change window; executing the change request on the first endpoint without regard for the change window; and returning to the requester an execution result of the change request. 2. The computer-implemented method of claim 1 , further comprising: routing the change request to a change approver for approving the change request. 3. The computer-implemented method of claim 1 , further comprising: sequencing the change request for execution in compliance with a change freeze period. 4. The computer-implemented method of claim 1 , further comprising: determining that a set of manual execution steps is required to execute the requested change according to the first change type and the set of change parameters for the set of resource attributes; routing the change request to a change executor for performing the set of manual execution steps; responsive to completion of the set of manual execution steps, determining a set of actions to be executed to complete the change request; and executing the set of actions. 5. The computer-implemented method of claim 1 , further comprising: determining that a hypervisor operation is required to execute the change request when a scope of the change request applies to more than just the first endpoint within the computer system; and sending a set of instructions to a hypervisor for the hypervisor operation. 6. The computer-implemented method of claim 1 , further comprising: updating configuration information of the first endpoint upon completion of executing the change request on the first endpoint; and storing an updated configuration information of the first endpoint. 7. The computer-implemented method of claim 1 , further comprising: coordinating an execution process of a plurality of change requests during the scheduled change windows. 8. A computer program product for performing server change management, the computer program product comprising a computer readable storage medium having stored thereon: first program instructions programmed to receive a change request made by a requester, the requester having an identity corresponding to an authorization, with respect to server changes, to only request changes for a set of endpoints associated with an application, the set of endpoints being within an enterprise system having managed endpoints; second program instructions programmed to identify certain endpoints of the set of endpoints that will be changed according to the change request, the certain endpoints being available to the requester according to the authorization for making the requested change, the certain endpoints including a first endpoint; third program instructions programmed to identify from within a set of possible change types, a subset of change types including a first change type that may be performed on the first endpoint based on a governing policy; fourth program instructions programmed to retrieve a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint; fifth program instructions programmed to determine a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes; sixth program instructions programmed to identify from within a set of possible change types, a subset of change types including a first change type that may be performed on the first endpoint based on a governing policy; seventh program instructions programmed to retrieve a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint; eighth program instructions programmed to determine a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes; ninth program instructions programmed to identify change window requirements for the first change type based on the set of change parameters; tenth program instructions programmed to evaluate compliance of the set of change parameters with a set of business policies; eleventh program instructions programmed to determine that the first change type is a safe change capable of being performed outside of a change window; twelfth program instructions programmed to execute the change request on the first endpoint without regard for the change window; and thirteenth program instructions programmed to return to the requester an execution result of the change request. 9. The computer program product of claim 8 , further comprising: fourteenth program instructions programmed to route the change request to a change approver for approving the change request. 10. The computer program product of claim 8 , further comprising: fourteenth program instructions programmed to sequence the change request for execution in compliance with a change freeze period. 11. The computer program product of claim 8 , further comprising: fourteenth program instructions programmed to determine that a set of manual execution steps is required to execute the requested change according to the first change type and the set of change parameters for the set of resource attributes fifteenth program instructions programmed to route the change request to a change executor for performing the set of manual execution steps; sixteenth program instructions programmed to, responsive to completion of the set of manual execution steps, determine a set of actions to be executed to complete the change request; and fifteenth program instructions programmed to execute the set of actions. 12. The computer program product of claim 8 , further comprising: fourteenth program instructions programmed to determine that a hypervisor operation is required to execute the change request when a scope of the change request applies to more than just the first endpoint within the computer system; and fifteenth program instructions programmed to send a set of instructions to a hypervisor for the hypervisor o
for accessing one among a plurality of replicated servers · CPC title
Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components · CPC title
based on a hash applied to IP addresses or costs · CPC title
Network arrangements or protocols for supporting network services or applications (user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00) · CPC title
Configuration management of networks or network elements (address allocation H04L61/50) · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.