Akamai Technologies, Inc.

John Devasia

Eugene (John) Neystadt

Eyal Heiman

Christopher Dewar

Eugene (“John”) Neystadt

Michael Graham

John Eugene Neystadt

Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

Proxy auto-configuration for directing client traffic to a cloud proxy with cloud-based unique identifier assignment

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.

Device discovery for cloud-based network security gateways

Proxy auto-configuration for directing client traffic to a cloud proxy

Growing community of inventors

Coppell, TX, United States of America

John Devasia