| CPC H04L 41/0893 (2013.01) [G06F 9/45558 (2013.01); H04L 12/4633 (2013.01); H04L 12/4641 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] | 21 Claims |
|
1. A non-transitory computer-readable medium storing instructions which, when executed by a computer device, causes the computer device to perform operations comprising:
discovering, based on one or more messages from one or more switches, that a plurality of endpoint hosts have joined an enterprise network, wherein the plurality of endpoint hosts comprise at least a first host and a second host, wherein each of the first host and the second host are assigned a corresponding address within a common subnet associated with the enterprise network, and the first and second hosts are endpoints in the enterprise network;
responsive to the discovering the first host, assigning to the first host a first role from a plurality of roles within the common subnet;
responsive to the discovering the second host, assigning to the second host a second role from the plurality of roles;
accessing a policy configuration defining allowable communications between endpoint hosts based on their respective roles;
dynamically generating, responsive to the discovering the first and second hosts, instructions based on the policy; and
providing the instructions to the one or more switches causing the one or more switches to permit or deny communication of data packets using the common subnet between the first and second hosts based on the first role and the second role.
|