Vmware, Inc.

Airwatch LLC

Mahesh Ashok Kavatage

Suman Aluvala

Pavan Rajkumar Rangain

Ramani Panchapakesan

Niranjan Paramashivaiah

Erich Peter Stuntebeck

Pushkal Maheshwari

Craig Farley Newell

Pavan Kumar Alagam Bhatta Ravindra

A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

User profile distribution and deployment systems and methods

This disclosure describes various ways in which a client agent can be incorporated into multiple virtual machines of a server cluster to keep track of the location of each instance of services running on the server cluster and facilitate rapid connection of different services on the server cluster as needed. When a first service requests connection to a second service, a client agent co-located with the first service is able to forward the request to a virtual network interface card (VNIC) associated with the second service. The VNIC is configured to forward the request to an available instance of the second service. The location of the services are determined and stored on one or more service registries right after the service instances are instantiated, removing the need for a search when new requests are received.

Inter-service communications

Disclosed are examples of managing devices through secondary communication channels. In some examples, a management component detects an impediment with a data communication channel for a device. The data communication channel can be a primary communication channel through which the device communicates with a management service. The management component detects an event associated with the device to report to the management service. The management component generates a message specifying the event, and the management component transmits the message to the management service through the secondary communication channel.

Managing devices through secondary communication channels

Disclosed are various examples for establishing encrypted channels or tunnels within a TCP or other communication session between a tunnel endpoint and tunnel client on a client device. A tunnel endpoint on the client device can determine an encryption key based upon whether a client device is in compliance with encryption policies of the enterprise.

Encryption key management of client devices and endpoints within a protected network

Disclosed are various examples for prioritizing application traffic through network tunnels between a client device and a tunnel endpoint. Network traffic is received from each of a plurality of applications executed by the client device. It is determined that the network traffic of a first application of the plurality of applications is associated with a lower priority than the network traffic of a second application of the plurality of applications. A bandwidth allocation to the network traffic of the first application is limited in the encrypted tunnel as compared to a bandwidth allocation to the network traffic of the second application in the encrypted tunnel according to the lower priority. The network traffic of each of the plurality of applications is forwarded through the encrypted tunnel to the tunnel endpoint.

Prioritizing application traffic through network tunnels

Examples relate to the configuration of network connections for computing devices. In some examples, a computing device determines that a network is inaccessible through a first network connection provided by a network access node. The computing device determines that the network is accessible through a first computing device that provides a second connection to the network. The computing device generates gateway configuration data for a second computing device based on an address for the first computing device. The computing device transmits the gateway configuration data to the second computing device to cause the second computing device to use the first computing device as a gateway.

Growing community of inventors

Bengaluru, India

Mahesh Ashok Kavatage