Fortinet, Inc.

Sekhar Sumanth Gorajala Chandra

Pankajkumar V Chechani

Selvam Thangaraj

Sashidhar V Annaluru

Chih-Hao Lee

Zhiyong Sun

Yongcheng Lei

An anomalous behavior is detected at an AI server device based on data communications managed by the wireless controller. In response to the detected behavior, a robot module can be deployed to a location of the anomalous behavior for testing. Once at the location, logs can be collected from testing or troubleshooting at the location and involving a remote access point proximate to the anomalous behavior (e.g., sniff and capture at specific channel or multiple channels in real-time). Solutions are generated from AI analysis concerning the anomalous behavior and priority level, including at least one automatically implemented solution to self-remediate the wireless network.

AI (artificial intelligence) driven dynamic self-remediation for wireless networks by dispatching robots

An access point has a housing with at least one connector for at least one external antenna and at least one connector for at least one internal antenna. An RF controller detects whether the at least one external antenna is connected to the at least one connector for the at least one external antenna when an open circuit is closed. Responsive to detecting that the at least one external antenna is connected, a first mode in which the at least one internal antenna supports RF capabilities switches to a second mode wherein the at least one external antenna supports RF capabilities.

Access point with modular internal/external antenna support

Responsive to the number of stations exceeding a first threshold number, the transmitting stations are prioritized relative to the station based on a station type. Responsive to the number of stations exceeding a second threshold number, the transmitting stations are prioritized relative to the station based on a station RSSI value. The station is assigned to the run queue with an ATF token responsive to being prioritized within the first or second thresholds permitting transmission of the data packet for the station. The station is assigned to a wait queue responsive to being prioritized outside of the first or second threshold not permitting transmission of the data packet for the station.

Airtime fairness in WLANs (wireless local access networks) based on dynamic updates to ATF (airtime fairness) tokens

Network packets are pre-processed and stored in network queues based on time sensitivity and other factors. More specifically, a specific application associated with a specific session of the network packets locally at the access point is determined. An ATR is adjusted based on a priority of the application with respect to time sensitivity. Other factors include throughput capability of a wireless device.

Application-specific airtime fairness in WLANS (wireless local access networks) based on time sensitivity of applications

Systems and methods for automatically obtaining WiFi profile data from an NFC device are provided. According to one embodiment, a client security application obtains a WiFi profile of a WiFi network via a near-field communication (NFC) device of the WiFi client device and establishes a WiFi connection with the WiFi network using the WiFi profile.

Managing wireless client connections via near field communication

Systems and methods are described for a mobile hotspot that can be managed by an access controller. According to an embodiment, a WAN connection is established by a mobile hotspot through a telecommunication data network via a wireless WAN module. When in a first mode, the mobile hotspot: (i) sets up a secure tunnel through the WAN connection with an AC of the enterprise that manages APs of a wireless network of an enterprise; (ii) broadcasts an SSID that is also broadcast by the APs; (iii) establishes a WLAN connection with a WiFi-enabled device based on an AP profile containing (a) authentication information regarding users approved to access the wireless network and (b) information identifying the SSID; (iv) receives WLAN traffic from the WiFi-enabled device through the WLAN connection; and (v) transmits the WLAN traffic to a server of the enterprise via the secure tunnel and the AC.

Mobile hotspot managed by access controller

Systems and methods for intelligently routing an incoming telephone call to an internal extension based on the calling history are provided. According to one embodiment, a session log, containing information regarding sessions between internal extension numbers and external telephone numbers, is maintained by a call monitor of a telephone system. The internal extension numbers are associated with telephone extensions within the telephone system and the external telephone numbers are associated with telephones outside of the telephone system. An incoming telephone call is received by the call monitor from a telephone outside the telephone system that is associated with an external telephone number. It is determined by the call monitor whether the incoming call represents a call-back to an internal extension number based on the session log. When the incoming call is determined to represent a call-back, then causing a switch to route the incoming call to the internal extension number.

Intelligent telephone call routing

Systems and methods are provided for centralized access, control, and management of APs. According to one embodiment, multiple APs of a private IP network are decoupled from potentially transient IP addresses by assigning a unique identifier to each of the multiple APs by an AC. An AC GUI is presented by the AC to an administrator through which (i) commands are provided by the administrator and (ii) the administrator is provided with access to a first AP of the multiple APs responsive to a command received from the administrator though the AC GUI and based upon the first AP's assigned unique identifier. The first AP is accessed, controlled or debugged by the AC based on the command. The access to the first AP enables a first AP GUI of the first AP through which the network administrator is provided with an ability to issue multiple commands to the first AP.

Centralized management of access points

Systems and methods are described for a mobile hotspot that can be managed from an access controller. According to an embodiment, a mobile establishes a wide area network (WAN) connection through a wireless WAN module and establishes a wireless local area network (WLAN) connection with a wireless fidelity (WiFi)-enabled device using a first wireless access point (AP) profile, wherein the first AP profile is also used for multiple APs of an enterprise that are controlled by an access controller (AC). The mobile hotspot sets up a secure tunnel with the AC through the WAN connection. After receiving WLAN traffic from the WiFi-enabled device through the WLAN connection, the WLAN traffic is transmitted to the AC through the secure tunnel.

Systems and methods for obtaining and managing network appliance position information are provided. According to one embodiment, a network appliance controller establishes a network connection with a mobile device. The network appliance controller receives via the network connection from the mobile device identification information associated with a network appliance and position information. The network appliance controller associates the identification information with the position information as a deployment position of the network appliance within the wireless local area network (WLAN).

Associating position information collected by a mobile device with a managed network appliance

Wireless access point (AP) and methods for providing wireless connectivity to wireless client are provided. According to one embodiment, a wireless AP includes a host hardware platform and a hypervisor for providing a first virtual machine where a first guest operating system (OS) is configured to run on the first virtual machine. A wireless module is configured to run on the first guest OS for managing the wireless connection to at least one wireless client. A wireless AP management console is configured to run on the wireless AP but outside the first guest OS and to manage operations of the wireless module and the first guest OS.

Management of wireless access points via virtualization

Systems and methods for intelligently routing an incoming telephone call to an internal extension based on the calling history are provided. According to one embodiment, a session log is maintained by a call monitor of a telephone system. The session log contains multiple call session records relating to telephone calls between internal extension numbers and external telephone numbers. An incoming telephone call from a telephone external to the telephone system is received by the call monitor. The session log is searched by the call monitor for a call session record corresponding to the external telephone number. When a result of the searching meets one or more predetermined or configurable conditions, then a switch of the telephone system is caused by the call monitor to route the incoming telephone call to one of the internal extension numbers.

Growing community of inventors

San Jose, CA, United States of America

Sekhar Sumanth Gorajala Chandra