Zscaler, Inc.

Raymond Brian Liu

Scott Laplante

Peter Nahas

Michael J Melson

Peter Smith

Thomas Evan Keiser, Jr

Suji Suresh

Harry Sverdlove

Andriy Kochura

Xing Li

Herman Parfenov

Anthony Gelsomini

Joseph Riopel

Daniel Einspanjer

Thomas C Hickman

Peter Kahn

Aparna Ayikkara

Nikitha Koppu

Omar Baba

Sean Lutner

John E O'Neil

John H O'Neil

Systems and methods include operating a local security agent that is configured to allow or block flows based on security policies, to implement microsegmentation; and, responsive to a block of a flow, creating a synthetic audit event that reflects what the flow would have been had it not been blocked. The steps can include creating a packet for the flow and transmitting the packet with an indicator that it represents the synthetic audit event. The steps can include receiving the security policies which include an indicator on which blocks to create the synthetic audit event.

Synthetic audit events in workload segmentation

A technique for microsegmentation includes receiving information related to hosts and applications operating in a network where the information was obtained based on a survey of the network; identifying a plurality of microsegments utilizing the information, each microsegment includes a set of hosts similar to one another; for each of the plurality of microsegments, identifying security policies that control access to hosts in each microsegment; and providing the plurality of microsegments and corresponding security policies for approval thereof.

Semi-automatic communication network microsegmentation

A computer system automatically generates a proposal for network application security policies to be applied on a telecommunications network. The system provides output representing the proposed network application security policies to a user. The user provides input either approving or disapproving of the network application security policies. If the user approves, then the system applies the of the proposed microsegmentation. This process may be repeated for a plurality of hosts and subsets thereof within the same network, and may be repeated over time to modify one or more existing network application security policies. The network application security policies govern inbound and outbound connections to the hosts in the network.

Identifying and providing network application security policies governing connections to and from hosts in a network

Growing community of inventors

Lexington, MA, United States of America

Raymond Brian Liu