Palo Alto Networks, Inc.

Juniper Networks, Inc.

Gigamon Inc.

Jesse C Shu

Leonid Burakovsky

Sachin Verma

Lei Chang

Chang Li

Krishna Narayanaswamy

Yonghui Cheng

Ying Zhang

I-Chun Chen

Chaohui Zhang

Qiong Wang

Dominick A Cafarelli

Murali Bommana

Sandeep Dahiya

Mingming Quan

Jinfeng Yu

Anoop V Kartha

Qiuyuan Liu

Techniques for mobile user identity and/or SIM-based IoT identity and application identity based security enforcement in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for mobile user identity and/or SIM-based IOT identity and application identity based security enforcement in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a subscriber identity for a new session; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the subscriber identity and the application identifier.

Mobile user identity and/or sim-based IoT identity and application identity based security enforcement in service provider networks

Techniques for mobile equipment identity and/or IoT equipment identity and application identity based security enforcement in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for mobile equipment identity and/or IoT equipment identity and application identity based security enforcement in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a device identifier for a new session; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the device identifier and the application identifier.

Mobile equipment identity and/or IoT equipment identity and application identity based security enforcement in service provider networks

Techniques for location based security in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. A system/process/computer program product for location based security in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a location for a new session; associating the location with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the location.

Location based security in service provider networks

Techniques for providing security for Cellular Internet of Things (CIoT) in mobile networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for enhanced security for CIoT in mobile networks in accordance with some embodiments includes monitoring network traffic on a service provider network at a security platform to identify a subscriber identity for a new session, in which the session is associated with a CIoT device; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the subscriber identity and the application identifier.

Security for cellular internet of things in mobile networks based on subscriber identity and application identifier

Mobile equipment identity and/or IOT equipment identity and application identity based security enforcement in service provider networks

Security for cellular internet of things in mobile networks based on subscriber identity and application

Techniques for radio access technology based security in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for radio access technology based security in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a Radio Access Technology (RAT) type for a new session; associating the RAT type with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the RAT type.

Radio access technology based security in service provider networks

Security for cellular internet of things in mobile networks

Mobile user identity and/or SIM-based IoT identity and application identity based security enforcement in service provider networks

A method for sampling packets for a network flow, includes: receiving a packet at a network port of a network switch appliance, the network switch appliance comprising an instrument port for communication with a network monitoring instrument; determining whether the packet belongs to a network flow that is desired to be monitored, wherein the act of determining is performed based at least in part on one or more information in a control plane using a processing unit; and passing the packet to the instrument port if the packet belongs to the network flow.

Systems and methods for sampling packets in a network flow

Growing community of inventors

Palo Alto, CA, United States of America

Jesse C Shu