The Network Security Policy Compiler (NetSPoC) is a tool for security
management of large computer networks with different security domains.
It generates configuration files for packet filters controlling the
borders of security domains. It provides its own language for
describing security policy and the topology of a network. The security
policy is a set of rules that state which packets are allowed to pass
the network and which are not. NetSPoC is topology aware; a rule for
traffic from A to B is automatically applied to all managed packet
filters on the path from A to B.
