Abstract: Systems and methods for generating a network policy. The method includes receiving at an interface a goal-based rule specifying a network policy that is to be enforced at each of a plurality of enforcement points; communicating the goal-based rule to one or more processors executing instructions stored on memory to provide a rules service; generating a first serialized rule based on the goal-based rule and a first enforcement point of the plurality of enforcement points, wherein the first serialized rule is in a first format interpretable by the first enforcement point; generating a second serialized rule based on the goal-based rule and a second enforcement point of the plurality of enforcement points, wherein the second serialized rule is in a second format interpretable by the second enforcement point. The method further includes enforcing the first serialized rule at the first enforcement point and enforcing the second serialized rule at the second enforcement point.

Abstract: Systems and methods for generating at least one object for a network policy. The method includes receiving at an interface a first object including a first plurality of data entries of a first type; storing the first object in a cloud accessible storage location for subsequent access; receiving at the interface a second object including a second plurality of data entries of the first type; storing the second object in the cloud accessible storage location for subsequent access; receiving a request to enforce a network policy that uses the first object; determining, using one or more processors executing instructions stored on memory, that the first object references the second object; and enforcing, using the one or more processors, the network policy using the first object and second object.

Abstract: Systems and methods for configuring a network security device. The methods include deploying a network security device on a network, wherein the network security device includes a network security device interface; accessing, via the network security device interface, a first cloud-based computing platform configured to request from a first library metadata associated with a first network resource on the first cloud-based computing platform; receiving at the network security device interface the metadata associated with the first network resource; and configuring the network security device in accord with the metadata associated with the first network resource.

Abstract: Systems and methods for configuring a network security device. The methods include deploying a network security device on a network, wherein the network security device includes a network security device interface; accessing, via the network security device interface, a first cloud-based computing platform configured to request from a first library metadata associated with a first network resource on the first cloud-based computing platform; receiving at the network security device interface the metadata associated with the first network resource; and configuring the network security device in accord with the metadata associated with the first network resource.