Cisco Technology, Inc.

Dany J Rochefort

Vincent E Parla

Joseph Salowey

Robert E Gleichauf

Peter Scott Davis

Hao Zhou

Andrzej Kielbasinski

Susan Elizabeth Thomson

Kenneth John Wante

John Bazzinotti

Timothy Steven Champagne

Venkateswara Rao Yarlagadda

Christopher R Bolinger

Danxiang Li

Marc Tardif

Victor Volpe

Russell E Rice

Mark Bernier

Fan Wu

Nizar Nassar

Systems and methods are provided for receiving information associated with a final single sign-on page from a native browser, extracting a public key from the information associated with the final single sign-on page, generating a single sign-on token to bind a browser session and a native application session, associating the single sign-on token with the public key extracted from the information associated with the final single sign-on page, and encrypting the single sign-on token with the public key to bind the browser session and the native application session.

Cryptographic binding of native application and external browser sessions

A computerized device transmits an access request to a data communications device of a network in an attempt to access network resources within the network. The data communications device, in response and in real-time, transmits a challenge request to the computerized device that directs the computerized device to retrieve configuration, or posture, credentials associated with the computerized device. A policy server receives the challenge response and, based upon a real-time analysis of the posture credentials of the computerized device, determines a security state of the computerized device and either provides some level or denies the computerized device access to the network resources based upon the analysis of posture. The data communications device detects the real-time security state of the computerized device prior to providing the computerized device with controlled access to the network resources, thereby limiting vulnerable computerized devices from accessing the network resources and minimizing the risk that the network resources receive or transmit malware.

Controlling access to resources in a network

When establishing a communications channel to a wireless network, through a wireless connection, a computerized device receives an Internet protocol (IP) address from a Dynamic Host Configuration Protocol (DHCP) server associated with the wireless network. The computerized device is configured with a table or list of IP addresses associated with wireless networks requiring a VPN or secure connection. The computerized device compares the IP address received from the DHCP server with the IP address entries of the table stored by the computerized device. If the computerized device detects a correspondence between the IP address received from the DHCP server and an IP address entry within the table, the computerized device automatically initiates a secure or VPN connection with the wireless network associated with the DHCP server. The computerized device therefore actively establishes a secure connection with the wireless network, prior to user login and without user intervention, based upon the computerized device being a client of the wireless network.

Methods and apparatus for providing security to a computerized device

In a virtual private network, a plurality of concentrators form an interface to provide client/remote site access to a private network over a public network. The plurality of concentrators are grouped into a virtual cluster. Each concentrator in the virtual cluster has an IP address and the virtual cluster has a virtual IP address. In operation, one of the plurality of concentrators assumes the virtual IP address and acts as the master device in the cluster. When a client attempts a connection to the private network, the client addresses an initial request to the virtual IP address. The master device responds to the client request by transmitting to the client the IP address of a concentrator in the cluster selected to handle the connection.

Method and apparatus for load balancing in a virtual private network

Growing community of inventors

Norfolk, MA, United States of America

Dany J Rochefort