Zscaler, Inc.

Andriy Kochura

Peter Smith

Scott Laplante

Peter Nahas

Harry Sverdlove

John E O'Neil

Thomas Evan Keiser, Jr

Michael J Melson

Suji Suresh

Xing Li

Raymond Brian Liu

Herman Parfenov

Thomas C Hickman

Joseph Riopel

Anthony Gelsomini

Aparna Ayikkara

Peter Kahn

Omar Baba

Nikitha Koppu

Daniel Einspanjer

Sean Lutner

John H O'Neil

A technique for microsegmentation includes receiving information related to hosts and applications operating in a network where the information was obtained based on a survey of the network; identifying a plurality of microsegments utilizing the information, each microsegment includes a set of hosts similar to one another; for each of the plurality of microsegments, identifying security policies that control access to hosts in each microsegment; and providing the plurality of microsegments and corresponding security policies for approval thereof.

Semi-automatic communication network microsegmentation

A system validates the establishment and/or continuation of a connection between two applications over a network. The system uses network application security rules to allow or disallow connections between the two applications. Those rules include definitions of the source and destination applications to which the rules apply. The system automatically updates the application definitions over time to encompass new versions of the applications covered by the security rules, but without encompassing other applications. The system is then capable of applying the updated rules both to the original applications and to the updated versions of those applications. This process enables the security rules to maintain security over time in a way that is consistent with the original intent of the rules even as applications on the network evolve.

Automatic network application security policy expansion

A computer system automatically generates a proposal for network application security policies to be applied on a telecommunications network. The system provides output representing the proposed network application security policies to a user. The user provides input either approving or disapproving of the network application security policies. If the user approves, then the system applies the of the proposed microsegmentation. This process may be repeated for a plurality of hosts and subsets thereof within the same network, and may be repeated over time to modify one or more existing network application security policies. The network application security policies govern inbound and outbound connections to the hosts in the network.

Identifying and providing network application security policies governing connections to and from hosts in a network

Growing community of inventors

North Andover, MA, United States of America

Andriy Kochura