Palo Alto Networks, Inc.

Apoorva Jain

Leonid Burakovsky

Sachin Verma

John Edward McDowall

Techniques for selective intelligent offloading for mobile networks using a security platform are disclosed. In some embodiments, a system/process/computer program product for selective intelligent offloading for mobile networks using a security platform includes monitoring network traffic in a core mobile network using a security platform executed on a network element in the core mobile network to identify a new session that attached to the core mobile network for mobile network communications; extracting meta information associated with the new session over a Diameter protocol and/or a Radius protocol using the security platform executed on the network element in the core mobile network; applying apply selective intelligent offloading using the security platform if the extracted meta information associated with the new session matches a selective intelligent offload policy; and performing traffic inspection by the security platform if the extracted meta information associated with the new session does not match a selective intelligent offload policy.

Selective intelligent offloading for mobile networks over diameter and/or radius protocols

Techniques for selective intelligent enforcement for mobile networks using a security platform are disclosed. In some embodiments, a system/process/computer program product for selective intelligent enforcement for mobile networks using a security platform includes monitoring network traffic in a core mobile network using a security platform executed on a network element in the core mobile network to identify a new session that attached to the core mobile network for mobile network communications; extracting meta information associated with the new session over a Diameter protocol and/or a Radius protocol using the security platform executed on the network element in the core mobile network; applying selective intelligent enforcement using the security platform if the extracted meta information associated with the new session matches a selective intelligent enforcement policy; and offloading the session to bypass inspection by the security platform if the extracted meta information associated with the new session does not match the selective intelligent enforcement policy.

Selective intelligent enforcement for mobile networks over diameter and/or radius protocols

Techniques for selective intelligent enforcement for mobile networks using a security platform are disclosed. In some embodiments, a system/process/computer program product for selective intelligent enforcement for mobile networks using a security platform includes monitoring network traffic in a core mobile network using a security platform executed on a network element in the core mobile network to identify a new session that attached to the core mobile network for mobile network communications; extracting meta information associated with the new session using the security platform executed on the network element in the core mobile network; applying selective intelligent enforcement using the security platform if the extracted meta information associated with the new session matches a selective intelligent enforcement policy; and offloading the session to bypass inspection by the security platform if the extracted meta information associated with the new session does not match the selective intelligent enforcement policy.

Growing community of inventors

San Jose, CA, United States of America

Apoorva Jain