Palo Alto Networks, Inc.

Jose Carlos Sagrero Dominguez

Zhanglin He

Tripti Agarwal

Kavitha Sivagnanam

Tushar Vyankatesh Nargunde

An orchestrator that manages security appliances for an organization determines a sink configured for traffic mirroring and correspondingly configures components for secure conveyance of mirrored traffic to a sink. The orchestrator configures a VM associated with the mirroring sink to use correlated packets and tunnel keys to securely convey the packets to an organization. The virtual machine decrypts each set of packets with the correlated tunnel key in memory and then re-encrypts the packets with a cryptographic key (hereinafter 'random key') generated on-the-fly for use on the current set of decrypted packets in memory. The virtual machine then encrypts the random key with a public key of the organization that will monitor and/or analyze the traffic data and writes the encrypted packets and/or packet contents and encrypted random key to a specified repository of the organization.

Growing community of inventors

Lilburn, GA, United States of America

Jose Carlos Sagrero Dominguez