• Introduction
  • Problem statement
  • Proposal for FW security policy enhancements
  • Routing and policy decoupling
  • Multi dimension segmentation
  • Policy portability
  • Visibility and Analytics
  • Proposed solution
  • Predefined Tags
  • Implicit tags (facts)
  • Tagging objects
  • Policy application
  • Configuration objects
  • Tags
  • Configuration Tag object
  • Analytics
  • Control node
  • Agent
  • Address-group
  • Configuration
  • Agent
  • Analytics
  • Service-group
  • Configuration
  • Agent
  • Application-policy
  • Policy-management
  • Firewall-policy
  • Firewall-rule
  • sequence number
  • id
  • name
  • description
  • actions
  • direction
  • complex actions
  • source/destination tags option
  • match
  • enabled
  • filter
  • Rest of the fieldsĀ 
  • User workflow
  • Policy attachment/apply
  • Policy evaluation
  • Operation mode
  • Policy portability
  • Analytics and UI
  • Aid configure/design security policies/posture
  • Monitor
  • High level implementation details
  • Agent
  • Configuration
  • Building of tags
  • Policy Set
  • Flow evaluation
  • Updates
  • Flow reevaluation
  • Control node
  • Analytics
  • Logs
  • Reports
  • Compliance