Juniper Networks, Inc.

Sampath Srinivas

Theron D Tock

Matthew Alan Palmer

Vadim Egorov

Andrew Richard Harding

Rod Murchison

Yvonne Pui Fung Sang

Roger Allen Chickering

Timothy Liu

A toolbar that is provided or inserted in a markup language document so as to facilitate features or functionality provided by a server is disclosed. The toolbar is able to determine whether the toolbar should be displayed as part of the markup language page being displayed. In one embodiment the server is an intermediary server.

Dynamic toolbar for markup language document

Improved approaches for providing secure access to resources maintained on private networks are disclosed. The secure access can be provided through a public network using a standard network browser. Multiple remote users are able to gain restricted and controlled access to at least portions of a private network through a common access point. The solution provided by the invention is not only easily set up and managed, but also able to support many remote users in a cost-effective manner.

Method and system for providing secure access to private networks

An access request is transmitted from a first device to a second device causing one or more security functions to be executed on the first device. Whether to grant the access request is based on a result of the executed one or more security functions.

Method and system for performing a security check

An intermediate network device includes a local caching module that caches user information from a remote server before a local user requests the information. In particular, the local caching module securely obtains and caches one-time passwords for a local user. The local caching device maintains separate sets of one-time passwords for each user. The local caching module may access the locally cached one-time passwords to authenticate a local user to a resource protected by a one-time password.

Local caching of one-time user passwords

An endpoint defense system uses endpoint health indicators and user identity information to provide fine-grain access control over network resources. For example, the endpoint defense system may include a controller, a set of protection devices, and a set of agents. The agents are software applications installed on a set of endpoints to gather the health information that represents security states of the endpoint devices. The agents send updated health information to the controller. In response to a login attempt, the controller processes the health indicators and identity information through a set of administrator-defined policies to generate a set of access rights. The controller transfers the set of access rights to the protection devices. The protection devices then control user access to network resources according to the set of access rights. The controller sends updated sets of access rights to the protection devices whenever the access rights change.

Network defense system utilizing endpoint health indicators and user identity

Techniques for modifying requests or browser viewable documents (e.g., markup language documents) are described. By modifying requests or browser viewable documents, access to resources residing on remote servers through an intermediate server is facilitated. In one embodiment, Universal Resource Locators (URLs) associated with requests or markup language documents are modified. The techniques are suitable for both secure and unsecure requests. The techniques can also modify requests or browser viewable documents at the intermediate server, a client device, or both.

Method and system for modifying requests for remote resources

Improved approaches for providing secure remote access to email resources maintained on private networks are disclosed. The secure access can be provided through a public network using a standard network browser. Multiple remote users are able to gain restricted and controlled access to email on a mail server within a private network through a common access point. The solution provided by the improved approaches allow not only native access to email resources but also robust authentication approaches.

Web resource request processing

Techniques for modifying a script portion of markup language documents are described. By modifying the script portion of markup language documents, access to resources residing on remote servers through an intermediate server is facilitated. The script portions can be modified at the intermediate server, client devices, or both.

Growing community of inventors

Santa Clara, CA, United States of America

Sampath Srinivas