Abstract: A policy management server manages a segmentation policy and policy constraints. The segmentation policy comprises a set of segmentation rules that each permit connections between specified groups of workloads that provide or consume network-based services. The policy constraints comprise a set of constraint rules that determine compliance of the segmentation rules. A workflow process may be initiated to resolve non-compliant rules by enabling an administrator to approve or deny the rule. In a large enterprise managing significant numbers of workloads, the policy constraints may be employed to ensure that overly permissive segmentation rules are not being created. This facilitates creation of a robust and narrowly tailored segmentation policy that reduces exposure of the enterprise to network-based security threats.

Abstract: A policy management server enables selective enforcement of a segmentation policy. The policy management server manages a segmentation policy that specifies a set of segmentation rules specifying permitted communications between workloads. The policy management server separately manages an enforcement policy that controls whether or not the segmentation policy is enforced for different services provided by the workloads. For services that are enforced, the policy management server distributes instructions to distributed enforcement modules that configure traffic filters to block traffic pertaining to enforced services that does not meet the segmentation rules. For non-enforced services, the policy management server obtains traffic data from the distributed enforcement modules without enforcing the segmentation policy to enable an administrator to build and/or test the segmentation policy.

Abstract: A policy management server manages a segmentation policy and policy constraints. The segmentation policy comprises a set of segmentation rules that each permit connections between specified groups of workloads that provide or consume network-based services. The policy constraints comprise a set of constraint rules that determine compliance of the segmentation rules. A workflow process may be initiated to resolve non-compliant rules by enabling an administrator to approve or deny the rule. In a large enterprise managing significant numbers of workloads, the policy constraints may be employed to ensure that overly permissive segmentation rules are not being created. This facilitates creation of a robust and narrowly tailored segmentation policy that reduces exposure of the enterprise to network-based security threats.

Abstract: A policy management server enables selective enforcement of a segmentation policy. The policy management server manages a segmentation policy that specifies a set of segmentation rules specifying permitted communications between workloads. The policy management server separately manages an enforcement policy that controls whether or not the segmentation policy is enforced for different services provided by the workloads. For services that are enforced, the policy management server distributes instructions to distributed enforcement modules that configure traffic filters to block traffic pertaining to enforced services that does not meet the segmentation rules. For non-enforced services, the policy management server obtains traffic data from the distributed enforcement modules without enforcing the segmentation policy to enable an administrator to build and/or test the segmentation policy.

Abstract: A catch basin insert or filter is supported in an open type curb inlet storm drain found on streets and in parking lots. Catch basin filters and inserts are designed to collect coarse sediments, oil, grease and debris from storm water runoff. Such filters normally require support on all four sides of a grate using the weight of the grate. A loop and rod attaches one or more sides of a filter or insert inside a curb inlet storm sewer vault instead of using the weight of the grate.

Abstract: A catch basin insert or filter is supported in an open type curb inlet storm drain found on streets and in parking lots. Catch basin filters and inserts are designed to collect coarse sediments, oil, grease and debris from storm water runoff. Such filters normally require support on all four sides of a grate using the weight of the grate. A loop and rod attaches one or more sides of a filter or insert inside a curb inlet storm sewer vault instead of using the weight of the grate.

Abstract: An improved anaerobic digestion process is provided to enhance the methane content of product gas so that no further processing may be required for utilization as high quality, high Btu gas comprising greater than 90 percent methane. Operating conditions of lowered carbon dioxide influent concentration to the methane production digester and operation of the methane production digester under pressurization achieve high conversion efficiency rates and high methane content product gas. The carbon dioxide produced during the anaerobic digestion may be physically and chemically separated and removed thereby reducing the carbon dioxide content of the product gas.