公开(公告)号：US20160164826A1

公开(公告)日：2016-06-09

申请号：US14725381

申请日：2015-05-29

Applicant: Cisco Technology, Inc.

Inventor： Wolfgang Arno Riedel ,  Mark Montanez ,  Saravanan Radhakrishnan ,  Ralph Edward Droms ,  David J. Zacks ,  Rohit Kumar Suri

IPC: H04L29/12 ,  G06F17/30 ,  H04L12/26

CPC classification number: H04L61/1511 ,  H04L43/026 ,  H04L43/0876

Abstract: In an embodiment, at a network element in a network, a domain name query is intercepted from a client. Metadata associated with a network application or service that is the object of the domain name query is obtained from a domain name system server. A policy is determined to enforce, based on the metadata, and the policy is enforced with respect to the client's access of the network application or service.

Abstract translation: 在一个实施例中，在网络中的网络元件处，从客户端拦截域名查询。 从域名系统服务器获取与作为域名查询对象的网络应用程序或服务相关联的元数据。 决定根据元数据执行策略，并针对客户端访问网络应用程序或服务实施策略。

公开(公告)号：US20160164825A1

公开(公告)日：2016-06-09

申请号：US14725371

申请日：2015-05-29

Applicant: Cisco Technology, Inc.

Inventor： Wolfgang Arno Riedel ,  Mark Montanez ,  Saravanan Radhakrishnan ,  Ralph Edward Droms ,  David J. Zacks ,  Rohit Kumar Suri

IPC: H04L29/12 ,  G06F17/30

CPC classification number: H04L61/1511 ,  H04L43/026 ,  H04L43/0876

Abstract: Methods and systems for implementing network traffic policies. A domain name system (DNS) infrastructure is accessed to obtain metadata associated with a destination address of a traffic flow; the traffic flow is classified by the destination address and the metadata; and a policy is applied to the traffic flow, wherein the policy is determined on the basis of the classification of the traffic flow.

Abstract translation: 实现网络流量策略的方法和系统。 访问域名系统（DNS）基础设施以获得与流量的目的地地址相关联的元数据; 流量按目的地址和元数据分类; 并且将策略应用于业务流，其中，基于业务流的分类来确定策略。