Sonicwall Inc.

Aventail LLC

Sonicwall US Holdings Inc.

Christopher Dean Peterson

Steven C Work

Prakash N Masanagi

David M Telehowski

Venkatesh Narsipur Gautam

Chemira Medappa

Christopher J Diorio

Abhishek Kumar

Jesse Paul Cooke

Jeetendra Kulkarni

Policy enforcement previously available for web proxy access methods is extended and applied to layer 3 packets flowing through VPN channels. With these extensions, a common security policy is possible that is enforceable between VPN proxied access and VPN tunneled access. Equivalent security policy to tunnel based VPN access without comprising the inherent performance, scalability and application compatibility advantages tunne based VPNs have over their proxy based VPN counterparts.

VPN deep packet inspection

RFID tag ICs may be configured with privacy modes. When a tag IC is in a privacy mode, it will not respond to commands unless a previous command includes correct verification information or specifies a recycling indicator of the tag IC. If the previous command includes correct verification information, then the tag IC will respond to one or more subsequent commands as normal, for example by responding with one or more identifiers. If the previous command does not include correct verification information but specifies a recycling indicator and the privacy mode is recycling-enabled, the tag IC may respond to one or more subsequent commands with recycling information. The recycling information identifies whether or how an item associated with the RFID IC can be recycled or disposed but does not otherwise identify the RFID IC or item. Otherwise, the tag IC may remain silent.

RFID ICs with privacy modes

Policy enforcement previously available for web proxy access methods is extended and applied to layer 3 packets flowing through VPN channels. With these extensions, a common security policy is possible that is enforceable between VPN proxied access and VPN tunneled access. Equivalent security policy to tunnel based VPN access without comprising the inherent performance, scalability and application compatibility advantages tunnel based VPNs have over their proxy based VPN counterparts.

An appliance works in conjunction with an agent on a remote device to control application access to a corporate network. In conjunction with an SSL tunnel and policy operating at the appliance, granular application control may be implemented. In particular, a device user may determine what applications from a set of applications may access the corporate network and which applications do not access the network. The applications may be analyzed to determine whether the application is good or bad, as what security configurations, approvals and denials are associated with the application.

Application signature authorization

Systems and methods for edge protection for internal identity providers are provided. A first claimed embodiment of the present disclosure involves a method for edge protection for internal identity providers. The method includes receiving a service authentication request at a virtual private networking (VPN) appliance on an edge of a secure network. A client device external to the secure network can send the service authentication request. The VPN appliance can then send a synthetic service authentication request to an identity provider in the secure network. This synthetic service authentication request can be based on the service authentication request. The VPN can then receive an authenticated credential from the identity provider. The authenticated credential is responsive to the synthetic service authentication request. The VPN appliance can then send the authenticated credential from the VPN appliance to the client device.

Edge protection for internal identity providers

A secure VPN connection is provided based on user identify and a hardware identifier. A client application may initiate the VPN connection. A client device user may provide identification information to the application, which then sends a VPN connection request to a remote VPN gateway. The VPN gateway may require an equipment identifier to establish the secure VPN gateway. If the hardware ID is registered, the secure VPN connection is established. If the hardware ID is not registered with the VPN gateway, the connection may be denied. In some instances, a connection may be established with an unregistered equipment ID based on settings at the VPN gateway.

Mobile device identify factor for access control policies

Systems and methods for management of persistent cookies in a corporate web portal are described. A plurality of zones may be defined and stored in memory. Each zone may be associated with a zone property indicative of whether cookies are allowed. A resource request may be received from a user device over a network where access to the requested resource may require a cookie. The user device may be classified into a zone from the plurality of zones based on the attributes of the user device. The cookie may be automatically installed on the user device based on a zone property for the zone and for those resources that have been configured to require installation of a cookie installed without requiring further user interaction following the request.

Growing community of inventors

Bellingham, WA, United States of America

Christopher Dean Peterson