Abstract: Systems and methods for a multi-tenant and fully automated Virtual Private Data Center (VPDC) provisioning. Examples include user interfaces for drag-and-drop configuration of a customer/user/tenant's network, validation checks on design choices, and automated provisioning of validated designs. The tenant may specify certain Quality of Service (QoS) choices along with the design structure, and various physical components and partitions of available and/or shared resources may be provisioned automatically for the tenant/customer.

Abstract: In a threat management system and method for managed systems, leveraging of identifications and/or assessments of common threats, and/or valuation of assets which may be susceptible to common threats, can be applied to facilitate monitoring of customer compliance with policies needed to guard against threats to customer assets. Threat identification and response in managed systems may be tailored for different customers, in some instances without having to parse individual customer details, such as assets at risk and types of threats to those assets.

Abstract: In a policy management system and method, managed services customer policies may be handled on a group or individual basis while taking advantage of information from monitoring and/or auditing of policies for similarly situated managed services customers. The policies may involve compliance standards in varied industries, such as the health care or financial industries. In one aspect, the policies may involve information technology (IT) security standards. In another aspect, the policies may involve both compliance standards and IT security standards.

Abstract: A method and system for determining a route for a packet traveling over at least one system from a source to a destination is disclosed. A first geographic area corresponds to the source and a second geographic area corresponds to the destination. The destination further has an address which does not indicate the second geographic area. In this aspect, the method and system include associating an address for the destination with the second geographic area to allow selection of the route for the data packet based on the second geographic area and selecting the route based on a second geographic area. In a second aspect, the method and system include providing a direct link having a controllable amount of traffic and selecting the direct link as at least a portion of the route when a data packet to the destination is to be routed. The method and system also facilitate selection of a route for a data packet. In this aspect, the method and system include obtaining information relating to an autonomous system.