Airwatch LLC

Vmware, Inc.

Nicira, Inc.

Omnissa, LLC

Leung Tao Kwok

Craig Farley Newell

Sulay Shah

Adam Stephen Rykowski

Amit Kumar Yadav

Sanjay Patil

Jayant Jain

Anirban Sengupta

Uday Suresh Masurekar

Srinivas Nimmagadda

Kausum Kumar

Ravishankar Chamarajnagar

Sagar Date

Sridhar Kommireddy

Utkarsh Singh

Adam Rykowski

Disclosed are various examples for configuring network security based on device management characteristics. In one example, a specification of a set of network resources on an internal network is received from an administrator client. The set of network resources are those network resources that a particular application executed in client devices on an external network should be authorized to access. A gateway from the external network to the internal network is then configured to permit the particular application to have access to the set of network resources.

Configuring network security based on device management characteristics

Disclosed are various approaches for verifying the compliance of a TLS session with TLs policies. Traffic between an application and a destination server can be routed through a TLS gateway. The TLS gateway can inspect TLS handshake messages for compliance with TLS policies.

TLS policy enforcement at a tunnel gateway

Disclosed are various examples for the use of network micro-segmentation in enterprise mobility management. In one example, a network device receives a packet with one or mote device management attribute embedded in its header. The network device extracts the device management attribute from the packet header. A compliance status of a client device in an external network is determined based on the device management attribute. The network device forwards the packet based on the compliance status.

Enterprise mobility management and network micro-segmentation

Disclosed are various examples for the use of network micro-segmentation in enterprise mobility management. In one example, a gateway receives network traffic from a client device through a virtual private network (VPN) tunnel. The gateway determines one or more device management attributes associated with the client device in response to receiving the network traffic. The gateway then determines a particular network virtual segment based at least in part on the device management attribute(s). The gateway forwards the network traffic to the particular virtual network segment.

Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.

Performing source network address translation based on remote device management attributes

Growing community of inventors

Cumming, GA, United States of America

Leung Tao Kwok