Juniper Networks, Inc.

Nikhil Gavraskar

Sachin Mutalik Desai

Baba Syed Mazaz Hussain

Avinash Jayaprakash

Veena Choudhary

Craig Dods

Pavan Lakshmi Kumar Jonnadula

Anurag Raghuvanshi

In some implementations, a security device may receive a traffic flow. The security device may determine an amount of a padding included in the traffic flow. The security device may determine whether the amount of the padding included in the traffic flow satisfies a padding threshold. The security device may perform, based on the amount of the padding satisfying the padding threshold, offloading for the traffic flow. The security device may inspect, based on the amount of the padding failing to satisfy the padding threshold, an entire portion of the traffic flow.

Systems and methods for avoiding offloading traffic flows associated with malicious data

A network device may communicate with another network device via a media access control security (MACsec) key agreement (MKA) communication link, wherein an MKA session has been established between the network device and the other network device. The network device may determine that the other network device is unavailable. The network device may cause, based on determining that the other network device is unavailable, an MKA state of the network device to be placed in a paused state. The network device may receive, after causing the MKA state of the network device to be placed in the paused state, a packet from the other network device via the MKA communication link. The network device may determine, based on the packet, that the MKA session has not ended. The network device may continue, based on the MKA session having not ended, the MKA session by reactivating the MKA state.

Continuing a media access control security (MACSEC) key agreement (MKA) session upon a network device becoming temporarily unavailable

Continuing a media access control security (MACsec) key agreement (MKA) session upon a network device becoming temporarily unavailable

A device may include one or more processors to establish a media access control security (MACsec) key agreement (MKA) session between a first network device and a second network device via a MACsec link; establish a fast heartbeat session via the MACsec communication link, between a first packet processing engine of the first network device and a second packet processing engine of the second network device, to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link; determine, based on the fast heartbeat session, that the MKA session has ended; and/or perform an action based on the MKA session ending.

Fast heartbeat liveness between packet processing engines using media access control security (MACsec) communication

Fast heartbeat liveness between packet processing engines using media access control security (MACSEC) communication

Growing community of inventors

Aurangabad, India

Nikhil Gavraskar