Cisco Technology, Inc.

Soumya Kumar Kalahasti

Parameswaran Kumarasamy

Prasad Miriyala

Jianxin Wang

Andrew E Ossipov

Manjunath Sreedhara Bangalore

Sandeep Singh Kohli

Jin Teng

Meixing Le

Louis Zhijun Liu

Techniques and architecture are described for providing broadcast/multicast support using VXLAN in and among private on-premises/cloud networks and public cloud networks by defining peer groups comprising VXLAN tunnel endpoints (VTEPs) within clustered network security devices. For example, a static peer group comprising two or more virtual extensible local access network (VXLAN) tunnel end points (VTEPs) is defined. The two or more VTEPs may each comprise a data interface of a network security device. Based at least in part on the static peer group, an overlay network comprising the two or more VTEPs is defined. A network security device discovers available VTEPs within the static peer group. The network security device establishes a mesh network of available VTEPs.

Method to provide broadcast/multicast support in public cloud

In one embodiment, a device in a network generates a machine learning-based traffic model using data indicative of a particular node in the network attempting to retrieve content from a particular resource in the network. The device predicts, using the traffic model, a time at which the particular node is expected to attempt retrieving future content from the particular resource. The device causes the future content from the particular resource to be prefetched in the network prior to the predicted time. The device makes a security assessment of the prefetched content. The device causes performance of a mitigation action in the network based on the security assessment of the prefetched content and in response to the particular node attempting to retrieve the future content from the particular resource.

Prefetch intrusion detection system

In one embodiment, a method is provided, including: initiating an interactive voice response (IVR) session between a first endpoint and an IVR system over an IP network; establishing a first media path between the first endpoint and a second endpoint; establishing a second media path between the first endpoint and the IVR system; and receiving at the IVR system a notice of a telephony event from the first endpoint. In another embodiment, a method is provided, including: initiating an interactive voice response (IVR) session between a first endpoint and an IVR system over an IP network; establishing a secure media path between the first endpoint and a second endpoint; and receiving an unsecured notice of a telephony event from the first endpoint.

Interactive voice response and secure media system integration

In one embodiment, a method includes initiating an interactive voice response (IVR) session with a user over an IP network, identifying an imminent secure session event, and initiating an encrypted mode for the IVR session.

Interactive voice response system security

In one particular embodiment, the secure media includes information sent using secure real-time transfer protocol (sRTP). Supplementary services may include call transfers, forwards/redirects, call hold with music on hold (MOH), call hold with no MoH, call resume, call park, call pickup, call blast etc. In a call flow, a call request may be received from a first device for a second device. The call request may include at least one set of keys and be ready for establishment of an sRTP call. It is then determined that a supplementary service is needed for the call request. For example, a supplementary service may indicate that a call redirect to a third device is required. The gateway then facilitates a supplementary service call with the third device. This is facilitated without contacting the first device to generate a second key after receiving the initial call request.

Growing community of inventors

Fremont, CA, United States of America

Soumya Kumar Kalahasti