Re: [I2nsf] Will you provide more details on the Rules' Information model in draft-kumar-i2nsf-client-facing-interface-im-00.txt?

[Rakesh Kumar <[e-mail]>]

Hi Linda,

Thanks a lot for the review.

One of the biggest challenges in the security world today is that, it is too complex with each vendor having their own set of features and functionality exposed in a very proprietary manner.  We have to simplify this with I2NSF client-facing interface so that a security admin can express their business needs without having to worry about the complexity.

It is very important that security requirements be expressed by security admin with simple rules. But it is easier said than done, this is one of the most complex problem as how to make rules simple but at the same time able to capture wide variety of use-cases in different environment.

The work done so far in this draft is just the beginning and we should brain storm and see how to make it more complete. I will look at the link you have sent and see how to leverage from there. Even if we develop very generic rules, we still need to define some basic constructs which would be used to build a policy. We have taken a step in that direction, but this is just a start and work will continue with ideas from folks in this WG.


Regards,
Rakesh

From: Linda Dunbar <[e-mail]>
Date: Tuesday, November 1, 2016 at 10:55 AM
To: Rakesh Kumar <[e-mail]>, "[e-mail]" <[e-mail]>
Cc: Adrian Farrel <[e-mail]>
Subject: RE: [I2nsf] Will you provide more details on the Rules' Information model in draft-kumar-i2nsf-client-facing-interface-im-00.txt?

Rakesh,

By the way, the I2NSF framework has specified to use ECA (Event Condition Action) to describe “Rules”.
https://datatracker.ietf.org/doc/draft-xibassnez-i2nsf-capability/ has the detailed description on how “Rules” information model.

Is there any issue to utilize those information model?

Thanks,
Linda

From: I2nsf [mailto:[e-mail]] On Behalf Of Linda Dunbar
Sent: 2016年11月1日 12:10
To: Rakesh Kumar <[e-mail]>; [e-mail]
Cc: Adrian Farrel <[e-mail]>
Subject: [I2nsf] Will you provide more details on the Rules' Information model in draft-kumar-i2nsf-client-facing-interface-im-00.txt?

Rakesh,

Thank you very much for contributing the draft. Just curious, the current IM for Rules doesn't have much details:


[cid:image001.jpg@01D23437.0C337430]

Will you add more in future revision?

Linda Dunbar

-----Original Message-----
From: I2nsf [mailto:[e-mail]] On Behalf Of Rakesh Kumar
Sent: 2016年10月31日 12:14
To: [e-mail]<mailto:[e-mail]>
Cc: Adrian Farrel <[e-mail]<mailto:[e-mail]>>; Linda Dunbar <[e-mail]<mailto:[e-mail]>>
Subject: [I2nsf] FW: New Version Notification for draft-kumar-i2nsf-client-facing-interface-im-00.txt

We posted a new draft that captures an information model for the client-facing interfaces based on “draft-ietf-i2nsf-client-facing-interface-req”.
This is an initial version, we plan to update this as we evolve based on new requirements and information.


Thanks & Regards,
Rakesh and other co-authors.


On 10/31/16, 10:08 AM, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>> wrote:


    A new version of I-D, draft-kumar-i2nsf-client-facing-interface-im-00.txt
    has been successfully submitted by Rakesh Kumar and posted to the
    IETF repository.

    Name:               draft-kumar-i2nsf-client-facing-interface-im
    Revision:   00
    Title:              Information model for Client-Facing Interface to Security Controller
    Document date:      2016-10-31
    Group:              Individual Submission
    Pages:              17
    URL:            https://www.ietf.org/internet-drafts/draft-kumar-i2nsf-client-facing-interface-im-00.txt
    Status:         https://datatracker.ietf.org/doc/draft-kumar-i2nsf-client-facing-interface-im/
    Htmlized:       https://tools.ietf.org/html/draft-kumar-i2nsf-client-facing-interface-im-00


    Abstract:
       This document defines information model for the client-facing
       interface to security controller based on the requirements identfied
       in the [I-D.kumar-i2nsf-client-facing-interface-req].  The
       information model defines various managed objects and the
       relationship among these objects needed to build the client
       interfaces.




    Please note that it may take a couple of minutes from the time of submission
    until the htmlized version and diff are available at tools.ietf.org.

    The IETF Secretariat



_______________________________________________
I2nsf mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/i2nsf