Abstract: A request to create a set of security policies for an application is received at a graphical user interface. Information identifying a set of source VMs, a set of destination VMs, and a set of target VMs also are received, wherein the target VMs are executing the application and are supported by (a) node(s) in a clustered virtualization environment. A set of inbound rules identifying (a) category(ies) of source VMs permitted to initiate connections with a subset of target VMs and a set of outbound rules identifying (a) category(ies) of destination VMs to which the subset of target VMs are permitted to initiate connections are received at the graphical user interface. Upon receiving a request to apply the security policies, the policies are configured based at least in part on the inbound and outbound rules and a visual representation of the security policies is presented in the graphical user interface.

Abstract: Systems for rendering graphs in browsers. A method embodiment for generating and manipulating a high-performance graph in a browser commences by receiving a set of node descriptions of the graph as well as a set of edge descriptions of the graph. In a first display layer, one or more HTML primitives are assigned to the individual ones of the set of nodes. In a second display layer, one or more non-HTML display graphical elements are assigned to the individual ones of the set of edges. The edges and nodes are sorted into a painting order based on size. The first layer and the second layer are combined into an HTML document that comprises at least some of the HTML primitives that correspond to the nodes as well as at least some of the non-HTML display graphical elements that correspond to the edges of the graph. The browser renders the graph.

Abstract: Particular embodiments provide a system comprising a cluster of host machines for managing communication connections in a virtualization environment. Implementing a virtualization environment, each of the host machines may comprise a hypervisor, a user virtual machine (UVM), and an I/O controller. A virtual disk may include a plurality of storage devices, wherein the I/O controllers conduct I/O transactions with the virtual disk based on I/O requests received from the UVMs. A management module may implement a monitoring policy of rules associated with an operating status of components of the virtualization environment. The management module may receive data associated with the operating status of the components. In response to determining that the data associated with the operating status satisfies one or more rules in the monitoring policy, the management module may initiate an alert and also display a graphical user interface that includes a root cause analysis of the alert.

Abstract: Systems and methods for aggregating policies to enforce on computing entities of a computing system. A method embodiment commences upon administrative definition of a set of named policy associations that are applicable to various types of such computing entities. The occurrence of two or more named policy associations that are associated with a particular computing entity cause the policies to be processed to detect and reconcile possible conflicts. Reconciliation is accomplished by applying a set of conflict resolution rules. The result of detection and reconciliation of conflicts is a policy aggregate that comprises two or more non-conflicting policy subcomponents. During ongoing uses of the computing entities, policy actions are taken so as to enforce the semantics of the policy subcomponents onto the computing entity.

Abstract: In one embodiment, a computing device receives a request from a client device to view one or more entities of a virtualization environment. Based on the received request, the computing device accesses an entity-relationship graph that corresponds to entities of the virtualization environment. Each of the entities is represented by an entity-type node in the entity-relationship graph, and relationships between the entities are represented by edges between the entity-type nodes. The computing device creates a user interface to manage the one or more entities, and the computing device sends information to the client device to display the user interface.

Abstract: A request to create a set of security policies for an application is received at a graphical user interface. Information identifying a set of source VMs, a set of destination VMs, and a set of target VMs also are received, wherein the target VMs are executing the application and are supported by (a) node(s) in a clustered virtualization environment. A set of inbound rules identifying (a) category(ies) of source VMs permitted to initiate connections with a subset of target VMs and a set of outbound rules identifying (a) category(ies) of destination VMs to which the subset of target VMs are permitted to initiate connections are received at the graphical user interface. Upon receiving a request to apply the security policies, the policies are configured based at least in part on the inbound and outbound rules and a visual representation of the security policies is presented in the graphical user interface.

Abstract: Systems for rendering graphs in browsers. A method embodiment for generating and manipulating a high-performance graph in a browser commences by receiving a set of node descriptions of the graph as well as a set of edge descriptions of the graph. In a first display layer, one or more HTML primitives are assigned to the individual ones of the set of nodes. In a second display layer, one or more non-HTML display graphical elements are assigned to the individual ones of the set of edges. The edges and nodes are sorted into a painting order based on size. The first layer and the second layer are combined into an HTML document that comprises at least some of the HTML primitives that correspond to the nodes as well as at least some of the non-HTML display graphical elements that correspond to the edges of the graph. The browser renders the graph.

Abstract: In one embodiment, a computing device receives a request from a client device to view one or more entities of a virtualization environment. Based on the received request, the computing device accesses an entity-relationship graph that corresponds to entities of the virtualization environment. Each of the entities is represented by an entity-type node in the entity-relationship graph, and relationships between the entities are represented by edges between the entity-type nodes. The computing device creates a user interface to manage the one or more entities, and the computing device sends information to the client device to display the user interface.

Abstract: Particular embodiments provide a system comprising a cluster of host machines for managing communication connections in a virtualization environment. Implementing a virtualization environment, each of the host machines may comprise a hypervisor, a user virtual machine (UVM), and an I/O controller. A virtual disk may include a plurality of storage devices, wherein the I/O controllers conduct I/O transactions with the virtual disk based on I/O requests received from the UVMs. A management module may implement a monitoring policy of rules associated with an operating status of components of the virtualization environment. The management module may receive data associated with the operating status of the components. In response to determining that the data associated with the operating status satisfies one or more rules in the monitoring policy, the management module may initiate an alert and also display a graphical user interface that includes a root cause analysis of the alert.

Abstract: An architecture for sorts and bucketizes alerts in a virtualization environment. A plurality of alerts associated with virtual machines in the virtualization environment is received. A plurality of attributes is identified for the virtual machines, and a plurality of buckets defined for each attribute, into which the received alerts are assigned. The buckets for each attribute are then sorted. The attributes may also be sorted based upon the distribution of alerts in the buckets of the attribute, allowing a system administrator or other personnel to more easily determine which attributes of the virtual machines are correlated with the received alerts, in order to identify potential causes and solutions for the alerts in the virtualization environment.

Abstract: An architecture for sorts and bucketizes alerts in a virtualization environment. A plurality of alerts associated with virtual machines in the virtualization environment is received. A plurality of attributes is identified for the virtual machines, and a plurality of buckets defined for each attribute, into which the received alerts are assigned. The buckets for each attribute are then sorted. The attributes may also be sorted based upon the distribution of alerts in the buckets of the attribute, allowing a system administrator or other personnel to more easily determine which attributes of the virtual machines are correlated with the received alerts, in order to identify potential causes and solutions for the alerts in the virtualization environment.

Abstract: An architecture for sorts and bucketizes alerts in a virtualization environment. A plurality of alerts associated with virtual machines in the virtualization environment is received. A plurality of attributes is identified for the virtual machines, and a plurality of buckets defined for each attribute, into which the received alerts are assigned. The buckets for each attribute are then sorted. The attributes may also be sorted based upon the distribution of alerts in the buckets of the attribute, allowing a system administrator or other personnel to more easily determine which attributes of the virtual machines are correlated with the received alerts, in order to identify potential causes and solutions for the alerts in the virtualization environment.

Abstract: A user interface for a network security console associated with multiple network security devices is disclosed. A graphical user interface (GUI) for use with an intrusion detection system, comprises a radar display that is configured to simulate a stream of time-based events chronologically. In addition, one or more playback controls are configured to control the stream during simulation. In further embodiments, the radar display includes a slider configured to allow a user to jump to events that occurred at a user-defined time.

Abstract: A user interface for a network security console associated with multiple network security devices is disclosed. A graphical user interface (GUI) for use with an intrusion detection system, comprises a radar display that is configured to simulate a stream of time-based events chronologically. In addition, one or more playback controls are configured to control the stream during simulation. In further embodiments, the radar display includes a slider configured to allow a user to jump to events that occurred at a user-defined time.