RELATED APPLICATIONS

Benefit is claimed under 35 U.S.C. 119(a)-(d) to Foreign Application Serial No. 201941002816 filed in India entitled “SCORE-BASED DYNAMIC FIREWALL RULE ENFORCEMENT”, on Jan. 23, 2019, by VMWARE, Inc, which is herein incorporated in its entirety by reference for all purposes.

BACKGROUND

Unless otherwise indicated herein, the approaches described in this section are not admitted to be prior art by inclusion in this section.

Virtualization allows the abstraction and pooling of hardware resources to support virtual machines in a software-defined networking (SDN) environment, such as a software-defined data center (SDDC). For example, through server virtualization, virtual machines running different operating systems may be supported by the same physical machine (also referred to as a “host”). Each virtual machine is generally provisioned with virtual resources to run an operating system and applications. The virtual resources may include central processing unit (CPU) resources, memory resources, storage resources, etc. In order to meet requirements of granularity and scalability in the SDN environment, a firewall engine may be deployed on each host to protect VMs against security threats. For example, after a user logs into a particular VM to access various resources in the SDN environment, the firewall engine may be configured to filter traffic to and from the VM. However, there is a risk that the user and associated VM may become rogue, which exposes other entities to malicious attacks.

