Ca, Inc.

Prosimo Inc

Prashanth Prabhu

Arunabha Saha

Howard Chen

Russell Daigle

Yehoshua Chen

Amit Kanfer

Paul Kao

Tobias Pischl

Alex Au Yeung

Manoj Kumar Sharma

An HTTP connection between a client computing device and an application is established through a reverse proxy. A response to the client computing device includes a payload instructing initiation of a non-HTTP connection (e.g., TCP, UDP). The response is modified to replace references to an original port with a dynamic port allocated to the non-HTTP connection and a temporary ACL entry is created. A subsequent connection request addressed to the dynamic port is authorized per the ACL, modified to replace the dynamic port with the original port, and forwarded to the application. Subsequent packets for the non-HTTP connection have port numbers translated between the original and dynamic ports.

Protocol switching for connections to zero-trust proxy

A method for securing cloud applications is described. The method may include establishing a connection between a cloud application isolation portal, a cloud access security broker, and a cloud application based on an indication of the cloud application and a set of credentials associated with an end user of the cloud application, and managing, via the cloud application isolation portal and the cloud access security broker, a session between the cloud application and a computing device associated with the end user based on the connection between the cloud application isolation portal with the cloud access security broker and the cloud application.

Securing cloud applications via isolation

Growing community of inventors

Mountain View, CA, United States of America

Prashanth Prabhu