US 11,811,736 B2
Generating network infastructure firewalls
Chandrika Allam, Bangalore (IN); Jose Pulickal, Kerala (IN); Priyanka Bandaru, Guntur (IN); Neha Bhandari, Bangalore (IN); Ravindra Gadad, Hubli (IN); Dhananjay Gawali, Bangalore (IN); Pravat Santra, Bangalore (IN); John Moratelli, Kansas City, KS (US); Kevin Hurst, Kansas City, KS (US); and John Ulmer, Kansas City, KS (US)
Assigned to Cerner Innovation, Inc., Kansas City, MO (US)
Filed by CERNER INNOVATION, INC., Kansas City, KS (US)
Filed on Jul. 14, 2021, as Appl. No. 17/375,869.
Claims priority of provisional application 63/132,794, filed on Dec. 31, 2020.
Prior Publication US 2022/0210128 A1, Jun. 30, 2022
Int. Cl. G06F 21/00 (2013.01); H04L 9/40 (2022.01)
CPC H04L 63/0263 (2013.01) 26 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
identifying, with respect to a data center, a data center mapping structure in an electronic storage database, the data center mapping structure comprising a map of the data center, wherein the map of the data center comprises one or more of: firewalls, routers, or servers, in the data center;
receiving a request to implement a network security configuration, the request comprising a source IP address and a destination IP address; and
responsive to the request, implementing the network security configuration using automatically identified firewalls, at least by:
utilizing the data center mapping structure to determine a route from the source IP address toward the destination IP address to automatically identify one or more firewalls, along the route, that are comprised in the data center mapping structure;
in response to automatically identifying the one or more firewalls along the route from the source IP address toward the destination IP address, determining a syntax for the one or more firewalls; and
automatically generating and deploying, utilizing a computer processor, one or more access control list (ACL) rules in the syntax for the one or more firewalls to implement the network security configuration in accordance with the request.