Fortinet, Inc.

Mcafee, Inc.

Shieldx Networks, Inc.

Damodar K Hegde

Jitendra B Gaitonde

Manoj Ahluwalia

Ratinder Paul Singh Ahuja

Manuel Nedbal

Mark Raymond Lubeck

Rajiv Sreedhar

Ankit R Jain

Nitin Maini

Suresh Rajanna

Gary Nool

Avinash Vishnu Pawar

Latha Krishnamurthi

Bimalesh Jha

Sujata Patel

Rajeshwari Rao

Dave Karp

Rajaram V Nanganure

Faizel Lakhani

John Parker

Stuart Gibson

Joel Christener

Sirisha Ganti

Sridevi Haridasa

Neil Liberman

Chaitra Jayaram

Rahila Kasim

Swati Patil

Harsimran S Sandhu

Systems, devices, and methods are discussed for forward testing rule sets at a granularity that is less than all activity on the network. In some cases, the granularity is that of an individual application.

Systems and methods for fine grained forward testing for a ZTNA environment

Systems, devices, and methods are discussed for automatically determining a risk-based focus in determining zero trust network access policy on one or more network elements.

Systems and methods for automated risk-based network security focus

Systems, methods, and apparatuses enable a security orchestrator to detect a virtual machine deployed in a virtual environment. The virtual machine includes a tag storing information associated with the virtual machine. The security orchestrator determines that the tag contains one or more security elements, the security elements indicating information for determining security settings and policies to be applied to the virtual machine. The security orchestrator determines the security settings and policies associated with the one or more security elements. The security orchestrator then assigns or applies the security settings and policies for the virtual machine based on values of the one or more security elements.

Dynamically applying application security settings and policies based on workload properties

Systems, methods, and apparatuses enable deploying and executing a security policy on endpoints in a network. In an embodiment, a security orchestrator determines a set of endpoints in a network and determines transformed endpoints from the determined set of endpoints through an endpoint transformation process. The security orchestrator determines a connectivity vector for at least a first transformed endpoint and a second transformed endpoint, where the connectivity vector includes properties associated with the corresponding transformed endpoint. Using the properties from the connectivity vector of the first transformed endpoint, a security policy is generated and deployed to the first transformed endpoint. Based on a comparison of the connectivity vectors of the first and second transformed endpoints indicating a similarity between the first and second transformed endpoints, the security policy is further deployed to the second transformed endpoint.

Systems and methods for managing endpoints and security policies in a networked environment

A method is provided in one example and includes receiving first sets of metadata elements representing an inventory of objects in a data storage location of a network environment and presenting an inventory view of the objects to a user. The inventory view includes a first summary of the inventory objects. The method further includes receiving a request from the user to manipulate the inventory view based on a first selected dimension group and presenting to the user a manipulated inventory view that includes a second summary of a first subset of the inventory objects. In more specific embodiments, the method includes receiving a request from the user to perform a protection task on objects of the first subset and initiating the protection task. The protection task includes one of applying a remediation policy to the objects of the first subset and registering the objects of the first subset.

System and method for providing data protection workflows in a network environment

In one embodiment, a method is provided and includes capturing a plurality of packet streams, recreating a plurality of flows from the packet streams, and analyzing the flows to identify one or more incidents. The incidents identify one or more pieces of data. The incidents are filtered and the incidents are rendered on a display for an end user that initiated the filtering operation. In other embodiments, the display allows the end user to view a selected one of a group of attributes for the incidents. The display allows the end user to open a captured object associated with a specific incident. In still other embodiments, the display allows a user to filter the incidents using a selected one of a group of group options such as content, destination IP, destination location, destination port, filename, host IP, etc.

System and method for managing data and policies

Growing community of inventors

Santa Clara, CA, United States of America

Damodar K Hegde