-
公开(公告)号:US20230388188A1
公开(公告)日:2023-11-30
申请号:US18447637
申请日:2023-08-10
Applicant: Juniper Networks, Inc.
Inventor: Prakash T. SESHADRI , Sunil G. RAWOORKAR , Yasmin ZARINA , Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Krishnaiah GOGINENI , Kartik Krishnan S. IYYER
IPC: H04L41/0893 , H04L9/40 , G06F9/50 , G06F9/54
CPC classification number: H04L41/0893 , H04L63/102 , H04L63/104 , H04L63/20 , G06F9/5072 , G06F9/54 , H04L41/16
Abstract: A device receives policy information indicating a policy to be implemented for an application hosted by multiple cloud domains, and receives, from the multiple cloud domains, different application resource tags and addresses associated with the application. The device maps the different application resource tags to a generic identifier, and associates the policy with the generic identifier and with the addresses associated with the application. The device provides, based on associating the policy with the generic identifier and with the addresses associated with the application, the policy to the multiple cloud domains to permit the multiple cloud domains to implement the policy.
-
2.
公开(公告)号:US20190297103A1
公开(公告)日:2019-09-26
申请号:US16024319
申请日:2018-06-29
Applicant: Juniper Networks, Inc.
Inventor: Prakash T. SESHADRI , Binh Phu LE , Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Kartik Krishnan S. IYYER
Abstract: A device receives network segment information identifying network segments associated with a network, and receives endpoint host session information identifying sessions associated with endpoint hosts communicating with the network. The device generates, based on the network segment information and the endpoint host session information, a data structure that includes information associating the network segments with the sessions associated with the endpoint hosts. The device updates the data structure based on changes in the sessions associated with the endpoint hosts and based on changes in locations of the endpoint hosts within the network segments, and identifies, based on the data structure, a particular endpoint host, of the endpoint hosts, that changed locations within the network segments. The device determines a threat policy action to enforce for the particular endpoint host, and causes the threat policy action to be enforced, by the network, for the particular endpoint host.
-
3.
公开(公告)号:US20240106849A1
公开(公告)日:2024-03-28
申请号:US18529413
申请日:2023-12-05
Applicant: Juniper Networks, Inc.
Inventor: Prakash T. SESHADRI , Binh Phu LE , Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Kartik Krishnan S. IYYER
CPC classification number: H04L63/1425 , G06F16/2228 , G06F16/2379 , H04L63/0209 , H04L63/1416 , H04L63/1433 , H04L63/1441 , H04L63/20 , H04L67/52
Abstract: A device receives network segment information identifying network segments associated with a network, and receives endpoint host session information identifying sessions associated with endpoint hosts communicating with the network. The device generates, based on the network segment information and the endpoint host session information, a data structure that includes information associating the network segments with the sessions associated with the endpoint hosts. The device updates the data structure based on changes in the sessions associated with the endpoint hosts and based on changes in locations of the endpoint hosts within the network segments, and identifies, based on the data structure, a particular endpoint host, of the endpoint hosts, that changed locations within the network segments. The device determines a threat policy action to enforce for the particular endpoint host, and causes the threat policy action to be enforced, by the network, for the particular endpoint host.
-
公开(公告)号:US20210099472A1
公开(公告)日:2021-04-01
申请号:US17247461
申请日:2020-12-11
Applicant: Juniper Networks, Inc.
Inventor: Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Sunil G. RAWOORKAR , Srinivasan VEERARAGHAVAN , Prakash T. SESHADRI
IPC: H04L29/06
Abstract: A device receives information identifying a specific host threat to a network, where the information includes a list of network addresses associated with the specific host threat. The device identifies network elements, of the network, associated with the specific host threat to the network, and determines a network control system associated with the identified network elements. The device determines a policy enforcement group of network elements, of the identified network elements, that maps to the list of network addresses associated with the specific host threat, where the network control system is associated with the policy enforcement group of network elements. The device determines a threat policy action to enforce for the specific host threat, and causes, via the network control system, the threat policy action to be enforced by the policy enforcement group of network elements.
-
公开(公告)号:US20210014119A1
公开(公告)日:2021-01-14
申请号:US16948623
申请日:2020-09-25
Applicant: Juniper Networks, Inc.
Inventor: Prakash T. Seshadri , Sunil G. RAWOORKAR , Yasmin ZARINA , Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Krishnaiah GOGINENI , Kartik Krishnan S. IYYER
Abstract: A device receives policy information indicating a policy to be implemented for an application hosted by multiple cloud domains, and receives, from the multiple cloud domains, different application resource tags and addresses associated with the application. The device maps the different application resource tags to a generic identifier, and associates the policy with the generic identifier and with the addresses associated with the application. The device provides, based on associating the policy with the generic identifier and with the addresses associated with the application, the policy to the multiple cloud domains to permit the multiple cloud domains to implement the policy.
-
公开(公告)号:US20190296978A1
公开(公告)日:2019-09-26
申请号:US15934737
申请日:2018-03-23
Applicant: Juniper Networks, Inc.
Inventor: Prakash T. SESHADRI , Sunil G. RAWOORKAR , Yasmin ZARINA , Srinivas NIMMAGADDA , Jeffrey S. MARSHALL , Krishnaiah GOGINENI , Kartik Krishnan S. IYYER
Abstract: A device receives policy information indicating a policy to be implemented for an application hosted by multiple cloud domains, and receives, from the multiple cloud domains, different application resource tags and addresses associated with the application. The device maps the different application resource tags to a generic identifier, and associates the policy with the generic identifier and with the addresses associated with the application. The device provides, based on associating the policy with the generic identifier and with the addresses associated with the application, the policy to the multiple cloud domains to permit the multiple cloud domains to implement the policy.
-
-
-
-
-