1. In a network security system having a plurality of bubbles, where each bubble has a plurality of bubble partitions, a method of creating a structured access list template, the method comprising:
- dividing a first access list template into a plurality of sections, where each section includes rules that implement a function;
- assigning a first plurality of network devices to a first bubble;
- assigning a second plurality of network devices to a second bubble;
- creating an inbound local rule group for the first bubble;
- creating an outbound local rule group for the first bubble;
- creating an inbound remote rule group for the first bubble for use by the second bubble for allowing access from the first plurality of network devices of the first bubble;
- creating an outbound remote rule group for the first bubble for use by the second bubble for allowing access to the plurality of network devices of the first bubble;
- arranging the inbound local rule group and the outbound local rule group in one of the plurality of sections of the first access list template; and
- arranging the inbound remote rule group and the outbound remote rule group in one of the plurality of sections of the first access list template.
2. A method as defined in claim 1, further comprising arranging the inbound remote rule group and the outbound remote rule group from another bubble access list template in the first access list template.
3. A method as defined in claim 1, further comprising dividing a second access list template into a plurality of sections, where each section includes rules that implement a function.
4. A method as defined in claim 3, further comprising arranging the inbound local rule group and the outbound local rule group in the second access list template.
5. A method as defined in claim 3, further comprising arranging the inbound remote rule group and the outbound remote rule group from another bubble access list template in the second access list template.
6. A method of creating a structured network for providing security comprising:
- assigning a first plurality of network devices to a first bubble;
- assigning a second plurality of network devices to a second bubble;
- providing a first access list template having a plurality of sections, where each section includes rules that implement a function;
- providing an inbound local rule group for the first bubble;
- providing an outbound local rule group for the first bubble;
- providing an inbound remote rule group for the first bubble for use by the second bubble for allowing access from the first plurality of network devices of the first bubble;
- providing an outbound remote rule group for the first bubble for use by the second bubble for allowing access to the first plurality of network devices of the first bubble;
- arranging the inbound local rule group and the outbound local rule group in one of the plurality of sections of the first access list template;
- arranging the inbound remote rule group and the outbound remote rule group in one of the plurality of sections of the first access list template; and
- utilizing the first access list template to ensure consistency in implementation of network security policies between the first bubble and the second bubble.
7. A method as defined in claim 6, further comprising arranging the inbound remote rule group and the outbound remote rule group from another bubble access list template in the first access list template.
8. A method as defined in claim 6, further comprising providing a second access list template having a plurality of sections, where each section includes rules that implement a function.
9. A method as defined in claim 8, further comprising arranging the inbound local rule group and the outbound local rule group in the second access list template.
10. A method as defined in claim 8, further comprising arranging the inbound remote rule group and the outbound remote rule group from another bubble access list template in the second access list template.
