Cisco Technology, Inc.

Patrick Darrell Tate

Edward Curt Kersey

Bruce F Wong

Shaheed Bacchus

Bradley Dale Dike

Larry David Bisel

Eric A Fritzges

Andre Justin Pecqueur

James W O'Toole, Jr

Hema M Prasad

Martin Grimm

Alexander S Waterman

Anurag Kahol

Sumandra Majee

Anh Tien Nguyen

A data security device for providing a network transport connection via a transparent network proxy that employs different encryption security mediums along a communications session between two endpoints by emulating one of the endpoints at an intermediate node such that the communication session appears as an atomic, secure connection to the endpoints yet provides appropriate security over the end-to-end connection. A sender node sends a connection request to establish a secure communication session with an intended receiver node. A transparent proxy on an intermediate node receives the request and establishes the link employing an encryption mechanism. The transparent proxy establishes a second link with the intended receiver, and applies a second, less expensive encryption mechanism. The transparent proxy combines the two links to form the trusted, secure connection but incurring only the mitigated expense over the second link.

Methods and apparatus for network communications via a transparent security proxy

A method, apparatus and computer program product for providing failover capability of cached secure sessions is presented. A cached secure session involving a first device and a second device is identified. The cached secure session is encrypted and replicated to a failover device. The encrypted session is then decrypted on the failover to device. An occurrence of a hot failover involving the second device is detected, and processing resumes between the first device and the failover device.

Method and apparatus to provide failover capability of cached secure sessions

A method is disclosed for reproxying connections. According to one aspect, a first connection is established between a client and a proxy device. A second connection is established between the proxy device and a server. The first connection comprises a first endpoint at the client and a second endpoint at the proxy device. The second connection comprises a third endpoint at the proxy device and a fourth endpoint at the server. The first and second connections are unproxied by dissolving the second and third endpoints while maintaining the first and fourth endpoints. After the connections have been unproxied, a packet is received at the proxy device. In response, the first and second connections are reproxied by creating fifth and sixth endpoints at the proxy device, so that the first connection comprises the fifth endpoint and the second connection comprises the sixth endpoint.

Reproxying an unproxied connection

A method, apparatus and computer program product for providing failover capability of cached secure sessions is presented. A cached secure session involving a first device and a second device is identified. The cached secure session is encrypted and replicated to a failover device. The encrypted session is then decrypted on the failover device. An occurrence of a hot failover involving the second device is detected, and processing resumes between the first device and the failover device.

Network connection switchover is accomplished through a method comprising receiving information defining a first connection between a first network device and a computer; establishing a replication channel between the first network device and a backup device; storing backup control information at the backup device; communicating a message flow between the first network device and the computer on the first transport connection; in response to unavailability of the first network device, communicating messages on the replication channel that cause (a) establishing a second connection between the backup device and the computer; (b) continuing communication of the message flow between the backup device and the computer based on the backup control information. TCP connections, for example, can be switched from an active device to a backup device without reset or re-transmission.

Method and apparatus for replicating a transport layer protocol stream

Growing community of inventors

Dunwoody, GA, United States of America

Patrick Darrell Tate