公开(公告)号：US20160156668A1

公开(公告)日：2016-06-02

申请号：US15014611

申请日：2016-02-03

Applicant: Juniper Networks, Inc.

Inventor： Michael E. KNAPPE ,  Joe TOMASELLO ,  Krishna NARAYANASWAMY ,  Alexander S. WATERMAN

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/0236 ,  H04L63/0281 ,  H04L63/12

Abstract: A network device is configured to receive network traffic associated with an application executing on a user device; identify, based on the network traffic, an application identifier associated with the application; determine whether the application identifier matches one of a set of application identifiers stored by the network device; identify a policy based on the application identifier when the application identifier matches one of the set of application identifiers; and apply the policy to the network traffic associated with the application. The policy may be obtained from another network device, in communication with the network device, when the application identifier does not match one of the set of application identifiers.

Abstract translation: 网络设备被配置为接收与在用户设备上执行的应用相关联的网络流量; 基于所述网络流量识别与所述应用相关联的应用标识符; 确定应用标识符是否匹配网络设备存储的一组应用标识符之一; 当所述应用标识符与所述应用标识符集合中的一者匹配时，基于所述应用标识符识别策略; 并将策略应用于与应用程序相关联的网络流量。 当应用标识符与一组应用标识符不匹配时，该策略可以从与网络设备通信的另一网络设备获得。