Watchguard Technologies, Inc.

Mobile Sonic, Inc.

Eivind Naess

Joseph T Savarese

Paul Lawrence Hoover

Christian E Hofstaedter

Michael Lee Snyder

James S Simpkins

Thomas A Sweet

Jonathan Jacob Scott

Joseph G Souza

Michael E Bryant

Mark D Hughes

Thomas Gunther Helms

S Aaron Stavens

Stephen Gregory Fallin

John Harvey Hillock

Steven Heckt

David Michael Mirly

Marius Lee

Glenn Patrick Aranas

Norman C Hamer

Eric C McNeill

Tridib Dutta

Andrew James Hoover

Carter Smith

Mark Anacker

Elizabeth Kihslinger

An Phan

Camilla Keenan-Koch

Erik D Olson

Erik Olson

Mobile management method, system and client. The method includes receiving a DNS query for a host name from an application on a client; retrieving reputation data associated with the host name from a local cache on the client; determining a policy for the host name, which is associated with the host name and the reputation data associated with the host name; based on the determined policy for the host name, blocking attempted network flows to a host corresponding to the host name; sending at least attempted network flow metadata related to the blocked attempted network flows to a collector on the client; and transmitting the attempted network flow metadata in the collector to a VPN server pool via a VPN tunnel.

Mobile management system

Mobile management method and system. The method includes receiving from an application on a client a DNS query for a host name; retrieving reputation data associated with the host name from a local cache on the client; determining whether a policy associated with the host name and the reputation data associated with the host name exists; and one of: sending network flows one of: through a VPN tunnel to a server or out a local proxy on the client to a private or public network; or blocking the network flow based on the determined policy for the host name.

A network security device may gather a large amount of metadata pertaining to the connections being managed thereby. A refinement module may filter and/or aggregate the connection metadata. The metadata may be refined on the network security device. The refined metadata may be provided for display on a terminal. The refined metadata may include a subset of the larger connection metadata, which may reduce the overhead required to display and/or transmit monitoring information to the terminal device. The refined metadata may comprise connection groups, which may be formed based on aggregation criteria, such as connection source, destination, application, security policy, protocol, port, and/or the like. The connection groups may be ranked in accordance with ranking criteria.

Systems and methods for scalable network monitoring

Growing community of inventors

Auburn, WA, United States of America

Eivind Naess