F5, Inc.

F5 Networks, Inc.

Bipin Kumar

Ravi Natarajan

Wui Chung Lie

Saxon Amdahl

Vinod Pisharody

Gauravsingh Khatri

Sergey Bimatov

Deepali Shah

James Hu

A method, non-transitory computer readable medium and device that assists with managing L7 network classification includes receiving a request to access a service by a mobile computing device. Next, application layer network traffic from the requesting mobile computing device is classified based on mobile data associated with the requesting mobile computing device. One or more actions are performed based on the classification.

Methods for managing L7 traffic classification and devices thereof

A method, non-transitory computer readable medium, and mobile application manager computing device that determines a priority level for a mobile device requiring a compliance check based on characteristic data associated with, or an identified user of, the mobile device. An entry comprising identifying data for the mobile device is inserted into a processing queue associated with the priority level. A determination is made when each of the processing queues associated with a higher priority level than the one priority level is empty. The entry is retrieved from the processing queue, the compliance check is performed on the mobile device, and a status of the mobile device is marked as out-of-compliance or in-compliance based on a result of the compliance check, when the determining indicates each of the processing queues associated with a higher one of the priority levels than the one priority level determined for the mobile device is empty.

Methods for enforcing compliance policies and devices thereof

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with managing a federated identity environment includes performing one or more first access control checks on a client upon receiving a request to access one or more web applications. A new signature including data associated with the performed one or more access control checks is generated. Next, the client is redirected to a first server with the generated signature to determine when to authorize the client to access the requested one or more web applications. The client is granted access to the requested one or more web applications when the client is determined to be authorized to access the requested one or more web applications based on one or more second access control checks enforced on the client using the generated signature, and wherein data associated with the enforced one or more second access control checks is included in a response signature.

Methods for managing a federated identity environment using security and access control data and devices thereof

Methods, non-transitory computer readable media, network traffic management apparatuses, and network traffic management systems that provide parameterized sub-policy evaluation for fine grain access control implemented by determining when there is a result for one of the plurality of sub-policies being evaluated for a received request for a resource during a session. The result for evaluation of the one of the plurality of sub-policies for the received request is used when the determination indicates the result is stored for the session. The one of the plurality of sub-policies is executed on the received request to obtain the result when the determination indicates the result is not stored for the session. The result for the one of the plurality of sub-policies from this execution is stored for the session.

Methods for parameterized sub-policy evaluation for fine grain access control during a session and devices thereof

Methods, non-transitory computer readable media, compliance management apparatuses, and network traffic management systems that execute a compliance check to determine when a mobile device is out of compliance. A number of mobile devices that both are out of compliance based on the violation and share a characteristic with the one mobile device is determined, when the determining indicates that the mobile device is out of compliance. A determination is made when the number of the mobile devices exceeds a threshold. Contact data associated with one or more mobile devices that are in compliance and share the characteristic is obtained, when the determining indicates that the number of mobile devices exceeds the threshold. A notification is automatically sent, using the contact data, to each of the mobile devices that share the characteristic. The notification comprises an indication of the violation and one or more precautions.

Growing community of inventors

San Ramon, CA, United States of America

Bipin Kumar