公开(公告)号：US20130133027A1

公开(公告)日：2013-05-23

申请号：US13740396

申请日：2013-01-14

Applicant: JUNIPER NETWORKS, INC.

Inventor： Roger Allen Chickering ,  Stephen Hanna ,  Paul Funk ,  Panagiotis Kougiouris ,  Paul James Kirner

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L41/0893 ,  H04L63/10 ,  H04L63/1433

Abstract: An endpoint integrity system controls access to resources of a protected network for endpoint devices attempting to access the protected network. The system may include a number of evaluation modules that communicate with an endpoint device. The evaluation modules generate policy results for the endpoint device, in which each of the policy results assume one of three or more states, called a multi-state policy result. The multi-state policy results are combined to produce a combined Boolean policy result.

Abstract translation: 端点完整性系统控制尝试访问受保护网络的端点设备对受保护网络的资源的访问。 系统可以包括与端点设备通信的多个评估模块。 评估模块生成端点设备的策略结果，其中每个策略结果承担三种或多种状态之一，称为多状态策略结果。 多状态策略结果被组合以产生组合的布尔策略结果。

公开(公告)号：US08661505B2

公开(公告)日：2014-02-25

申请号：US13728173

申请日：2012-12-27

Applicant: Juniper Networks, Inc.

Inventor： Panagiotis Kougiouris ,  Roger Chickering ,  Paul James Kirner ,  Stephen R. Hanna

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/10

Abstract: A module may include interface logic to receive information identifying a state related to a client device via logic related to a controlled environment, and to send a valid policy result to a host device, where the valid policy result is related to the state. The module may include processing logic to process policy content according to a resource policy, where the processing is based on the information, and to produce the valid policy result based on the processing using the resource policy, where the valid policy result is adapted for use by the host device when implementing the network policy with respect to a destination device when the client device attempts to communicate with the destination device.

Abstract translation: 模块可以包括接口逻辑，用于通过与受控环境相关的逻辑来接收标识与客户端设备有关的状态的信息，并且向主机设备发送有效的策略结果，其中有效的策略结果与状态相关。 该模块可以包括根据资源策略来处理策略内容的处理逻辑，其中处理基于该信息，并且基于使用资源策略的处理产生有效的策略结果，其中有效的策略结果适于使用 当客户机设备尝试与目的地设备通信时，通过主机设备实现关于目的地设备的网络策略。

公开(公告)号：US09479538B2

公开(公告)日：2016-10-25

申请号：US14169795

申请日：2014-01-31

Applicant: JUNIPER NETWORKS, INC.

Inventor： Roger Chickering ,  Stephen R. Hanna ,  Paul Funk ,  Panagiotis Kougiouris ,  Paul James Kirner

IPC: H04L12/24 ,  H04L29/06

CPC classification number: H04L63/20 ,  H04L41/0893 ,  H04L63/10 ,  H04L63/1433

Abstract: An endpoint integrity system controls access to resources of a protected network for endpoint devices attempting to access the protected network. The system may include a number of evaluation modules that communicate with an endpoint device. The evaluation modules generate policy results for the endpoint device, in which each of the policy results assume one of three or more states, called a multi-state policy result. The multi-state policy results are combined to produce a combined Boolean policy result.