Prosimo Inc

Ca, Inc.

Arunabha Saha

Prashanth Prabhu

Howard Chen

Sidhesh Divekar

Russell Daigle

Mohil Khare

Amit Kanfer

Yehoshua Chen

Manoj Kumar Sharma

Paul Kao

Tobias Pischl

Alex Au Yeung

Edge clusters execute in a plurality of regional clouds of a cloud computing platforms, which may include cloud POPs. Edge clusters may be programmed to control access to applications executing in the cloud computing platform. Edge clusters and an intelligent routing module route traffic to applications executing in the cloud computing platform. Application instances accessed through different edge clusters may have a backup relationship managed by a health monitor that is external to the cloud computing platforms. The health monitor monitors accessibility of the application instances internally and externally relative to the cloud computing platforms and transitions the role of primary instance between the application instances by managing routing logic of the cloud computing platforms.

Active backup path management for multi-region and multi-cloud applications

An HTTP connection between a client computing device and an application is established through a reverse proxy. A response to the client computing device includes a payload instructing initiation of a non-HTTP connection (e.g., TCP, UDP). The response is modified to replace references to an original port with a dynamic port allocated to the non-HTTP connection and a temporary ACL entry is created. A subsequent connection request addressed to the dynamic port is authorized per the ACL, modified to replace the dynamic port with the original port, and forwarded to the application. Subsequent packets for the non-HTTP connection have port numbers translated between the original and dynamic ports.

Protocol switching for connections to zero-trust proxy

A method for securing cloud applications is described. The method may include establishing a connection between a cloud application isolation portal, a cloud access security broker, and a cloud application based on an indication of the cloud application and a set of credentials associated with an end user of the cloud application, and managing, via the cloud application isolation portal and the cloud access security broker, a session between the cloud application and a computing device associated with the end user based on the connection between the cloud application isolation portal with the cloud access security broker and the cloud application.

Securing cloud applications via isolation

Growing community of inventors

Fremont, CA, United States of America

Arunabha Saha