Cisco Technology, Inc.

Ellis Roland Dobbins

Ian Foo

Chandra Sekhar Buduguru

Rajiv Raghunarayan

Chandrahasa C Pullagura

Barry L Greene

Klaus Hermanns

Partha P Bhattacharya

Jeremy Stieglitz

Robert E Gleichauf

Arthur Zavalkovsky

Jason Frazier

James Lewis Fenton

Jeevan Shashikant Patil

Venkateswara Rao Yarlagadda

Craig Allen Huegen

Venkateswara Rao Yartagadda

Jim L Fenton

Robert Eric Gleichauf

Mitigating threats in a network includes receiving a message at a network device. The message includes device-independent parameters generated in response to a threat. The network device converts the parameters into one or more device-specific operations and then performs the operations to mitigate the threat.

Mitigating threats in a network

Link layer authentication information is supplied by a link layer authentication device to an access router for tracking IP address usage by a client device. The authentication information supplied to the access router includes an authenticated client identifier and a corresponding authenticated link identifier for the client device that attached to the network based on the authenticated link identifier. The access router, in response to receiving a message that specifies the authenticated link identifier and a source IP address, adds the source IP address to a cache entry that specifies the authenticated client identifier and the corresponding authenticated link identifier, and outputs to an audit resource a record that specifies the source IP address and the authenticated link identifier.

Arrangement for tracking IP address usage based on authenticated link identifier

A method and system is disclosed for creating and tracking network sessions. A request to access a network is received from an entity. The entity is authenticated after the request is received. Authenticated identity information associated with the entity, network address information associated with the entity, and network location information associated with the entity is collected. An information set is created. The information set comprises and binds together the authenticated identity information, the network address information, and the network location information. The information set indicates a present association among the authenticated identity information, the network address information, and the network location information. The information set is stored in a session record in a centralized database. The session record represents a session in which the entity accesses the network. The session record is one of a plurality of session records that are stored in the centralized database. The plurality of session records is used by a data processing system to perform real-time diagnostics of the network.

Method and system for creating and tracking network sessions

Growing community of inventors

San Jose, CA, United States of America

Ellis Roland Dobbins