知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

28 records (took 0.023 seconds)

    Distribution of stateless security functions
    11.
    发明授权
    Distribution of stateless security functions 有权

    公开(公告)号：US11483290B2

    公开(公告)日：2022-10-25

    申请号：US16985664

    申请日：2020-08-05

    Applicant: Cisco Technology, Inc.

    Inventor： Saravanan Radhakrishnan ,  Anand Oswal ,  Ashwin Kumar ,  Paul Wayne Bigbee ,  Darrin Joseph Miller

    IPC: H04L29/06 ,  H04L9/40

    Abstract: Systems and methods are provided for receiving, at a network device, a first set of rules from a security controller of an enterprise network, the first set of rules being different from a second set of rules provided to a firewall by the security controller, implementing, at the network device, the first set of rules received from the security controller, generating, at the network device, a first log including metadata based on the first set of rules, the first log being generated on a per flow basis, notifying, at the network device, a NetFlow of the first log including the metadata of the first set of rules, and providing, from the network device, the first log to a cloud-log store by the NetFlow of the network device, the cloud-log store receiving the first log from the network device and a second log from the firewall.

    Intelligent identity-aware application proxy
    12.
    发明授权
    Intelligent identity-aware application proxy 有权

    公开(公告)号：US11108763B2

    公开(公告)日：2021-08-31

    申请号：US16738954

    申请日：2020-01-09

    Applicant: Cisco Technology, Inc.

    Inventor： Balaji Sundararajan ,  Vivek Agarwal ,  Darrin Joseph Miller ,  Anand Oswal ,  Chandramouli Balasubramanian

    IPC: H04L29/06 ,  H04L29/08

    Abstract: In one embodiment, a method by a first network apparatus includes receiving a request to access a resource from a client device associated with a user, determining that the request does not comprise a session cookie, sending an authorization request to a second network apparatus, receiving an authorization response including a resource authorization token from the second network apparatus, determining that the user is authorized to access the resource using the client device based on the received resource authorization token, establishing a first communication session with the client device by sending a message to the client device, and establishing a second communication session with a resource server that provides the resource, where the first network apparatus relays traffic between the client device and the resource server.

    Enhanced flow-based computer network threat detection
    13.
    发明授权
    Enhanced flow-based computer network threat detection 有权

    公开(公告)号：US10855705B2

    公开(公告)日：2020-12-01

    申请号：US15720553

    申请日：2017-09-29

    Applicant: Cisco Technology, Inc.

    Inventor： Matthew Scott Robertson ,  Darrin Joseph Miller ,  Sunil Navinchandra Amin ,  Paul Wayne Bigbee

    IPC: H04L29/06 ,  H04L12/24 ,  G06F21/50 ,  G06F21/55 ,  H04L12/26

    Abstract: In one example embodiment, a threat detection server receives metadata of a network flow in a network; a zone definition that correlates the metadata of the network flow with a first zone of network devices in the network and a second zone of network devices in the network, where the network flow was transmitted from the first zone to the second zone; and a security policy for the network flow, where the security policy is enforced on the basis of the first zone and the second zone. Based on the zone definition, the threat detection server annotates a flow record that includes the metadata with an indication of the first zone and the second zone. Based on the annotated flow record and the security policy, the threat detection server determines whether to generate a notification associated with a detection of a security threat associated with the network flow.

    Dynamic media access control addresses in a wireless network
    15.
    发明授权
    Dynamic media access control addresses in a wireless network 有权

    公开(公告)号：US12262450B2

    公开(公告)日：2025-03-25

    申请号：US18476737

    申请日：2023-09-28

    Applicant: Cisco Technology, Inc.

    Inventor： Jerome Henry ,  Nancy Cam-Winget ,  Simone Arena ,  Darrin Joseph Miller ,  Sudhir Kumar Jain ,  Einar Nilsen-Nygaard

    IPC: H04W8/24 ,  H04L61/5053 ,  H04L101/622 ,  H04W28/02 ,  H04W28/086

    Abstract: Embodiments identify a station that rotates an over the air station address. As address rotation was not originally designed into wireless networks, the rotation can introduce communication challenges for the station. The embodiments derive that traffic referencing two different over the air station addresses are associated with a single common station. This is accomplished by determining a similarity between properties of two sets of traffic. A first set of traffic references the first over the air station address and a second set of traffic references the second over the air station address. If the properties common across the two sets of traffic indicate sufficient similarity, the embodiments determine that both sets of traffic are associated with a single device. Network configuration of the device is then adjusted based on the determination.

    Group based classification and policy enforcement for external network traffic
    17.
    发明授权
    Group based classification and policy enforcement for external network traffic 有权

    公开(公告)号：US11716284B2

    公开(公告)日：2023-08-01

    申请号：US17308224

    申请日：2021-05-05

    Applicant: Cisco Technology, Inc.

    Inventor： Prakash C. Jain ,  Sanjay Kumar Hooda ,  Darrin Joseph Miller ,  Ashwin Kumar

    IPC: H04L12/741 ,  H04L45/74 ,  H04L9/40

    CPC classification number: H04L45/74 ,  H04L63/205

    Abstract: Techniques for group-based classification and policy enforcement at a network fabric edge for traffic that is being sent to external network destinations are disclosed herein. The techniques may include receiving, at a control plane of a network and from an edge node of the network, a request to provide mapping data associated with sending a packet to a destination. Based at least in part on an address prefix value associated with the destination, the control plane may determine that the destination is located in an external network. Additionally, a group identifier that is associated with the destination may be determined. In this way, an indication of the group identifier may be sent to the edge node such that the edge node may determine, based at least in part on the group identifier, a policy decision for routing the packet to the external network.

    Intelligent Identity-aware Application Proxy
    18.
    发明申请
    Intelligent Identity-aware Application Proxy 有权

    公开(公告)号：US20210218726A1

    公开(公告)日：2021-07-15

    申请号：US16738954

    申请日：2020-01-09

    Applicant: Cisco Technology, Inc.

    Inventor： Balaji Sundararajan ,  Vivek Agarwal ,  Darrin Joseph Miller ,  Anand Oswal ,  Chandramouli Balasubramanian

    IPC: H04L29/06 ,  H04L29/08

    Abstract: In one embodiment, a method by a first network apparatus includes receiving a request to access a resource from a client device associated with a user, determining that the request does not comprise a session cookie, sending an authorization request to a second network apparatus, receiving an authorization response including a resource authorization token from the second network apparatus, determining that the user is authorized to access the resource using the client device based on the received resource authorization token, establishing a first communication session with the client device by sending a message to the client device, and establishing a second communication session with a resource server that provides the resource, where the first network apparatus relays traffic between the client device and the resource server.

    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS
    19.
    发明申请
    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS 有权

    公开(公告)号：US20210119971A1

    公开(公告)日：2021-04-22

    申请号：US16985664

    申请日：2020-08-05

    Applicant: Cisco Technology, Inc.

    Inventor： Saravanan Radhakrishnan ,  Anand Oswal ,  Ashwin Kumar ,  Paul Wayne Bigbee ,  Darrin Joseph Miller

    IPC: H04L29/06

    Abstract: Systems and methods are provided for receiving, at a network device, a first set of rules from a security controller of an enterprise network, the first set of rules being different from a second set of rules provided to a firewall by the security controller, implementing, at the network device, the first set of rules received from the security controller, generating, at the network device, a first log including metadata based on the first set of rules, the first log being generated on a per flow basis, notifying, at the network device, a NetFlow of the first log including the metadata of the first set of rules, and providing, from the network device, the first log to a cloud-log store by the NetFlow of the network device, the cloud-log store receiving the first log from the network device and a second log from the firewall.

Patent Agency Ranking