中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

122 records (took 0.029 seconds)

    LICENSE BASED TRAFFIC MANAGEMENT IN HYBRID NETWORKS
    52.
    发明申请
    LICENSE BASED TRAFFIC MANAGEMENT IN HYBRID NETWORKS 有权

    公开(公告)号：US20220116806A1

    公开(公告)日：2022-04-14

    申请号：US17556765

    申请日：2021-12-20

    Applicant: Cisco Technology, Inc.

    Inventor： Balaji Sundararajan ,  Sanjay Kumar Hooda ,  Venkatesh Ramachandra Gota ,  Chandramouli Balasubramanian ,  Anand Oswal

    IPC: H04W24/08 ,  H04W28/02 ,  H04W36/22 ,  H04W28/24 ,  H04W48/06

    Abstract: Systems and methods for managing traffic in a hybrid environment include monitoring traffic load of a local network to determine whether the traffic load exceeds or is likely to exceed a maximum traffic load, where the maximum traffic load is a traffic load for which a service can be provided by the local network, based on a license. An excess traffic load is determined if the traffic load exceeds or is likely to exceed the maximum traffic load. One or more external networks which have a capacity to provide the service to the excess traffic load are determined, to which the excess traffic load is migrated. The local network includes one or more service instances for providing the service for up to the maximum traffic load, and the service to the excess traffic load is provided by one or more additional service instances in the one or more external networks.

    Intelligent Identity-aware Application Proxy
    56.
    发明申请
    Intelligent Identity-aware Application Proxy 有权

    公开(公告)号：US20210218726A1

    公开(公告)日：2021-07-15

    申请号：US16738954

    申请日：2020-01-09

    Applicant: Cisco Technology, Inc.

    Inventor： Balaji Sundararajan ,  Vivek Agarwal ,  Darrin Joseph Miller ,  Anand Oswal ,  Chandramouli Balasubramanian

    IPC: H04L29/06 ,  H04L29/08

    Abstract: In one embodiment, a method by a first network apparatus includes receiving a request to access a resource from a client device associated with a user, determining that the request does not comprise a session cookie, sending an authorization request to a second network apparatus, receiving an authorization response including a resource authorization token from the second network apparatus, determining that the user is authorized to access the resource using the client device based on the received resource authorization token, establishing a first communication session with the client device by sending a message to the client device, and establishing a second communication session with a resource server that provides the resource, where the first network apparatus relays traffic between the client device and the resource server.

    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS
    57.
    发明申请
    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS 有权

    公开(公告)号：US20210119971A1

    公开(公告)日：2021-04-22

    申请号：US16985664

    申请日：2020-08-05

    Applicant: Cisco Technology, Inc.

    Inventor： Saravanan Radhakrishnan ,  Anand Oswal ,  Ashwin Kumar ,  Paul Wayne Bigbee ,  Darrin Joseph Miller

    IPC: H04L29/06

    Abstract: Systems and methods are provided for receiving, at a network device, a first set of rules from a security controller of an enterprise network, the first set of rules being different from a second set of rules provided to a firewall by the security controller, implementing, at the network device, the first set of rules received from the security controller, generating, at the network device, a first log including metadata based on the first set of rules, the first log being generated on a per flow basis, notifying, at the network device, a NetFlow of the first log including the metadata of the first set of rules, and providing, from the network device, the first log to a cloud-log store by the NetFlow of the network device, the cloud-log store receiving the first log from the network device and a second log from the firewall.

    DYNAMIC INTENT-BASED FIREWALL
    60.
    发明申请
    DYNAMIC INTENT-BASED FIREWALL 审中-公开

    公开(公告)号：US20200177550A1

    公开(公告)日：2020-06-04

    申请号：US16434115

    申请日：2019-06-06

    Applicant: Cisco Technology, Inc.

    Inventor： Vamsidhar Valluri ,  Saravanan Radhakrishnan ,  Anand Oswal ,  Vinay Prabhu ,  Sarah Adelaide Evans ,  Suraj Rangaswamy

    IPC: H04L29/06 ,  H04L12/46 ,  H04L12/741 ,  H04L12/751

    Abstract: Systems and methods provide for provisioning a dynamic intent-based firewall. A network controller can generate a master route table for network segments reachable from edge network devices managed by the controller. The controller can receive zone definition information mapping the network segments into zones and Zone-based Firewall (ZFW) policies to apply to traffic between a source and destination zone specified by each ZFW policy. The controller can evaluate a ZFW policy to determine first edge network devices that can reach first network segments mapped to the source zone specified by the ZFW policy, second edge network devices that can reach second network segments mapped to the destination zone specified by the ZFW policy, and routing information (from the route table) between the first network segments, the first and second edge network devices, and the second network segments. The controller can transmit the routing information to the edge network devices.

Patent Agency Ranking