Abstract: An example profiler device includes one or more processors implemented in circuitry and configured to monitor network traffic entering and exiting the protected network zone; identify one or more endpoints that interface with the protected network zone; compare network traffic characteristics of network traffic associated with the endpoints to network traffic characteristics of known device types to determine device types corresponding to the endpoints; assign one or more network policies to the identified endpoints according to the determined device types; and distribute data representing the assigned network policies to a policy enforcement point (PEP) device to cause the PEP device to enforce the network policies on network traffic, associated with the identified endpoints, entering and exiting the protected network zone.

Abstract: A method for assigning an event to a device on a network is described by using a topology editor as user-controlled interface. The event is represented as a labeled graphic indication. Other devices on a data network, also represented graphically, are to be assigned to the event by using the user-controlled interface. A rule is then defined and associated with the event. When a condition, as defined by the rule is met by an application or device on the network, all of the devices assigned to the event are notified of the condition met by the rule in accordance with such graphically defined relationships.