Mobile Iron, Inc.

Zscaler, Inc.

Oplink Communications, Inc.

Ivanti, Inc.

Jian Liu

Kumara Das Karunakaran

Vijay Pawar

Suresh Kumar Batchu

Atul Vijay Tulshibagwale

Ivan Golovenko

John A Chanak

Lifu Gong

Hongwei Mao

Tian Zhu

Victor Pavlov

Srinivas Kavuri

Clifford Kahn

Systems and methods for defending against volumetric attacks, implemented in a cloud-based system. Embodiments include steps of, monitoring flows and a rate of requests to a Data Center (DC); receiving a request from an address to the DC, the request being for a service in a cloud-based system; determining if the address has been successfully authenticated within a past predetermined time period; responsive to the address not having been successfully authenticated within the past time period, and one of (i) the rate of requests being above a threshold or (ii) the number of flows being above a threshold, placing the address in a penalty box for a predetermined amount of time; and blocking requests from the address in the penalty box for the predetermined amount of time.

Defending against volumetric attacks

Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Secure access via remote browser isolation

Techniques are disclosed to provide VPN and identity based authentication to cloud-based services. In various embodiments, a request to authenticate a user to a service is received. A user identity associated with one or both of the user and the request is determined based at least in part on data comprising the request. An identity assertion is generated based at least in part on the user identity. The identity assertion is provided to a requesting node with which the request to authenticate is associated.

Unified VPN and identity based authentication to cloud-based services

Techniques to provide secure access to a cloud-based service are disclosed. In various embodiments, a request is received from a client app on a device to connect to a security proxy associated with the cloud-based service. A secure tunnel connection between the device and a node with which the security proxy is associated is used to establish the requested connection to the security proxy. Information associated with the secure tunnel is used to determine that the requesting client app is authorized to access the cloud-based service from the device and to obtain from an identity provider associated with the cloud-based service a security token to be used by the client app to authenticate to the cloud-based service.

Identity proxy to provide access control and single sign on

Methods, systems, and apparatus, for optical switching. In one aspect, a wavelength selective switch includes one or more optical input ports; one or more optical output ports; a first optical wavelength dispersion element configured to separate the plurality of wavelength channels of the input optical beam; a second optical wavelength dispersion element configured to combine two or more separate optical beams each having one or more different wavelengths, into a combined beam having the plurality of wavelength channels; a polarization modulator array configured to independently change a polarization orientation of an optical beam passing through; optical components for directing optical beams corresponding to respective wavelength channels to different polarizing modulation cells; and a polarization beam splitter configured to route received optical beams to particular output paths according to polarization orientation.

Wavelength selective switch

Growing community of inventors

Fremont, CA, United States of America

Jian Liu