Zscaler, Inc.

John H O'Neil

Thomas Evan Keiser, Jr

Peter Smith

Abhinav Bansal

Ajit Singh

Scott Laplante

Peter Nahas

Michael J Melson

Vivek Raman

Harry Sverdlove

Suji Suresh

Xing Li

Andriy Kochura

Raymond Brian Liu

Aparna Ayikkara

Omar Baba

Sean Lutner

Herman Parfenov

Daniel Einspanjer

Joseph Riopel

Anthony Gelsomini

Thomas C Hickman

Peter Kahn

Nikitha Koppu

Systems and methods for microsegmentation include receiving network communication information that describes flows between hosts in a network and applications executed on the hosts; generating a network communication model based on the network communication information that labels flows; and providing polices to the hosts based on the network communication model where the policies cause performance a set of actions, locally at a host, on any of the flows based on corresponding labels. The labels are one of healthy and unhealthy. The set of actions include blocking, allowing, and allowing for a period of time before confirmation.

Distributed network application security policy generation and enforcement for microsegmentation

A technique for microsegmentation includes receiving information related to hosts and applications operating in a network where the information was obtained based on a survey of the network; identifying a plurality of microsegments utilizing the information, each microsegment includes a set of hosts similar to one another; for each of the plurality of microsegments, identifying security policies that control access to hosts in each microsegment; and providing the plurality of microsegments and corresponding security policies for approval thereof.

Semi-automatic communication network microsegmentation

Systems and methods include obtaining a plurality of parameters associated with a host; determining a fingerprint of the host utilizing the plurality of parameters; and providing the fingerprint to cloud service for enrollment and management of the host in the cloud service. The cloud service can include microsegmentation of the host. The cloud service can include any of Internet access for the host and private resource access by the host.

Fingerprinting to identify devices and applications for use in management and policy in the cloud

Growing community of inventors

Watertown, MA, United States of America

John H O'Neil