Cisco Technology, Inc.

Richard James Smith

Fabio Rodolfo Maino

Alberto Rodriguez Natal

Lorand Jakab

Mikhail Davidov

Bhautik Doshi

Bradford Pielech

A method includes generating, by an internal segmentation orchestrator, a key to cipher/decipher a cryptographic segmentation tag used by an untrusted device, transmitting the key to an external segmentation orchestrator, transmitting the cryptographic segmentation tag to the external segmentation orchestrator and provisioning a trusted network edge with the key and optionally the cryptographic segmentation tag. The method can also include onboarding, based on the key and the cryptographic segmentation tag, the untrusted device, wherein the untrusted device receives the cryptographic segmentation tag from the external segmentation orchestrator.

Systems and methods for providing security orchestration for trusted traffic segmentation on untrusted devices

The present technology pertains to a system and method for extending enterprise networks' trusted policy frameworks to cloud-native applications. The present technology comprises sending, by an enterprise network controller, a first communication to a service mesh orchestrator for a service mesh, wherein the first communication informs the service mesh orchestrator of traffic segmentation policies to be applied to traffic originating at an enterprise network and of layer 7 extension headers which correspond to the enterprise network traffic segmentation policies.

Extending enterprise trusted policy framework to cloud native applications

A network management system. In particular implementations, a method includes establishing a persistent session with one or more network management servers, where each persistent session is identified relative to a session identifier; authenticating one or more clients requesting access; receiving, from a client, a request to access a selected network management server of the one or more network management servers; generating a ticket for the client; and transmitting a redirection message to the client, where the redirection message identifies the selected network management server and includes the ticket and the session identifier corresponding to the selected network management server.

Growing community of inventors

Detroit, MI, United States of America

Richard James Smith