Palo Alto Networks, Inc.

Apple Inc.

Qiuming Li

Taylor Ettema

Ho Yu Lam

Robert Earle Ashley

Paul Mathison

Ashwath Sreenivasa Murthy

Nicholas M McDonnell

Prabhakar M V B R Mangam

Yongjie Yin

Shriram S Jandhyala

Mohit Narang

Michael J Newman

Neeraj Gupta

Xuanyu Jin

Robert Tesh

Swapnil S Jain

Xiaoyu Cheng

Hardik Joshi

Paul Theodore Mathison

Techniques for time-based network authentication challenges are disclosed. In some embodiments, a system, process, and/or computer program product for time-based network authentication challenges includes monitoring a session at a firewall to identify a user associated with the session, generating a timestamp for an authentication factor associated with the user after the user successfully authenticates for access to a resource based on an authentication profile, intercepting another request from the user for access to the resource at the firewall, and determining whether the timestamp for the authentication factor is expired based on the authentication profile.

Time-based network authentication challenges

Techniques for outbound/inbound lateral traffic punting based upon process risk are disclosed. In some embodiments, a system/process/computer program product for outbound/inbound lateral traffic punting based upon process risk includes receiving, at a network device on an enterprise network, process identification (ID) information from an endpoint (EP) agent executed on an EP device, in which the process ID information identifies a process that is associated with an outbound or inbound network session on the EP device on the enterprise network, and the EP agent selected the network session for punting to the network device for inspection; monitoring network communications associated with the network session at the network device to identify an application identification (APP ID) for the network session; and performing an action based on a security policy using the process ID information and the APP ID.

Outbound/inbound lateral traffic punting based on process risk

An input device, such as a stylus, can include a main body comprising a main body connector for connecting to a charger to charge a power source of the stylus. A separate functional end module is removable from the main body to expose the main body connector. The functional end module includes a functional component and a module connector that communicates with the main body via the main body connector. Various different functional end modules can be interchangeable to provide a variety of distinct features to the stylus.

Multipurpose stylus with exchangeable modules

Techniques for fine-grained firewall policy enforcement using session APP ID and endpoint process ID correlation are disclosed. In some embodiments, a system/process/computer program product for fine-grained firewall policy enforcement using session APP ID and endpoint process ID correlation includes receiving, at a network device on an enterprise network, process identification (ID) information from an endpoint (EP) agent executed on an EP device, in which the process identification information identifies a process that is initiating a network session from the EP device on the enterprise network; monitoring network communications associated with the network session at the network device to identify an application identification (APP ID) for the network session; and performing an action based on a security policy using the process ID information and the APP ID.

Fine-grained firewall policy enforcement using session app ID and endpoint process ID correlation

A method for operating a first radio of a number of radios within a radio frequency system may include sending a first command to the first radio of the plurality of radios to initiate an antenna sector level sweep and determining a first set of metrics associated with a first set of signals from other radios of the plurality of radios that correspond to the antenna sector level sweep. The method may also include receiving a second set of metrics associated with the first set of signals from a responder electronic device and identifying a sector of a number of sectors associated with the antenna sector level sweep based on the first set of metrics and the second set of metrics. The method may then involve sending a second command to the first radio to transmit data to the responder device via the identified sector.

Antenna array uplink sector level sweep to allow coexistence with other in-device radios

Systems, methods, and devices are provided for performing an antenna sector level sweep of a radio in a radio frequency system with co-existence of other radios. The method may involve sending a first command to a portion of a plurality of radios to determine a first set of signal quality metrics associated with the portion of the plurality of radios for one or more sectors of an antenna while the first radio is not active. The method may involve determining a second set of signal quality metrics associated with using the portion of the plurality of radios when the first radio is active via one or more sectors of a sector level sweep. The method also include generating a table that includes the second set of signal quality metrics and storing the table that indicates a portion of the sectors to avoid when the first radio performs a subsequent sweep.

Antenna array uplink sector selection and deselection based on coexistence with other in-device radios

Growing community of inventors

San Jose, CA, United States of America

Qiuming Li