公开(公告)号：US08661505B2

公开(公告)日：2014-02-25

申请号：US13728173

申请日：2012-12-27

Applicant: Juniper Networks, Inc.

Inventor： Panagiotis Kougiouris ,  Roger Chickering ,  Paul James Kirner ,  Stephen R. Hanna

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/10

Abstract: A module may include interface logic to receive information identifying a state related to a client device via logic related to a controlled environment, and to send a valid policy result to a host device, where the valid policy result is related to the state. The module may include processing logic to process policy content according to a resource policy, where the processing is based on the information, and to produce the valid policy result based on the processing using the resource policy, where the valid policy result is adapted for use by the host device when implementing the network policy with respect to a destination device when the client device attempts to communicate with the destination device.

Abstract translation: 模块可以包括接口逻辑，用于通过与受控环境相关的逻辑来接收标识与客户端设备有关的状态的信息，并且向主机设备发送有效的策略结果，其中有效的策略结果与状态相关。 该模块可以包括根据资源策略来处理策略内容的处理逻辑，其中处理基于该信息，并且基于使用资源策略的处理产生有效的策略结果，其中有效的策略结果适于使用 当客户机设备尝试与目的地设备通信时，通过主机设备实现关于目的地设备的网络策略。

公开(公告)号：US09479538B2

公开(公告)日：2016-10-25

申请号：US14169795

申请日：2014-01-31

Applicant: JUNIPER NETWORKS, INC.

Inventor： Roger Chickering ,  Stephen R. Hanna ,  Paul Funk ,  Panagiotis Kougiouris ,  Paul James Kirner

IPC: H04L12/24 ,  H04L29/06

CPC classification number: H04L63/20 ,  H04L41/0893 ,  H04L63/10 ,  H04L63/1433

Abstract: An endpoint integrity system controls access to resources of a protected network for endpoint devices attempting to access the protected network. The system may include a number of evaluation modules that communicate with an endpoint device. The evaluation modules generate policy results for the endpoint device, in which each of the policy results assume one of three or more states, called a multi-state policy result. The multi-state policy results are combined to produce a combined Boolean policy result.

公开(公告)号：US20130145421A1

公开(公告)日：2013-06-06

申请号：US13728173

申请日：2012-12-27

Applicant: JUNIPER NETWORKS, INC.

Inventor： Panagiotis KOUGIOURIS ,  Roger Chickering ,  Paul James Kirner ,  Stephen R. Hanna

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/10

Abstract: A module may include interface logic to receive information identifying a state related to a client device via logic related to a controlled environment, and to send a valid policy result to a host device, where the valid policy result is related to the state. The module may include processing logic to process policy content according to a resource policy, where the processing is based on the information, and to produce the valid policy result based on the processing using the resource policy, where the valid policy result is adapted for use by the host device when implementing the network policy with respect to a destination device when the client device attempts to communicate with the destination device.

Abstract translation: 模块可以包括接口逻辑，用于通过与受控环境相关的逻辑来接收标识与客户端设备有关的状态的信息，并且向主机设备发送有效的策略结果，其中有效的策略结果与状态相关。 该模块可以包括根据资源策略来处理策略内容的处理逻辑，其中处理基于该信息，并且基于使用资源策略的处理产生有效的策略结果，其中有效的策略结果适于使用 当客户机设备尝试与目的地设备通信时，通过主机设备实现关于目的地设备的网络策略。