Palo Alto Networks, Inc.

Aditya Srinivasa Ivaturi

Jayant Jain

Brian Russell Kean

Mingfei Peng

Mohit Sahni

Srikanth Ramachandran

Uttam Ramesh

Nidhi Shah

Krishna Murthy Pokuri

Srikanth Mulakaluri

Suraj Kumar Jaiswal

Manish Pathak

A data packet is received. It is determined whether the data packet is encapsulated. One or more security policies are applied to the data packet based on whether the data packet is encapsulated.

Preserving security information over NAT enabled devices using encapsulation

Mitigating multiple authentications for a geo-distributed security service is disclosed. A request to access a web service from a client device is received. The request is redirected to a geo-distributed authentication service including a distributed cache for storing a user's authentication authorization. An authorization token included in a distributed authentication cache cookie and uniform resource locator (URL) for the web service to facilitate secure access to the web service from the client device are returned.

Mitigating multiple authentications for a geo-distributed security service using an authentication cache

A controller can securely publish an application of a tenant by securely extending a network fabric into the networks of the tenant with virtual private networks and NAT. After a tenant deploys an application into one or more networks of the tenant, the tenant can indicate select applications to publish. The network controller assigns a network address from the routable address space of the network fabric to the application and a network address aggregate to each application connector that will front an instance of the application, which securely extends the network fabric into the tenant network. The network controller configures NAT rules in the network fabric and on the application connector to create a route for traffic of the application through the network fabric to the application instance using a fully qualified domain name assigned to the application without exposing a private network address of the application instance and preserving security of other resource on the tenant network.

Securely publishing applications from private networks

Growing community of inventors

Santa Clara, CA, United States of America

Aditya Srinivasa Ivaturi