Juniper Networks, Inc.

Pulse Secure, LLC

Steven Erickson

Oliver Kourosh Tavakoli

Yan Avlasov

A device may include an interface to send authentication information to a plug-in, where the authentication information is related to a client device. The interface may send a policy identifier to the plug-in, where the policy identifier identifies a policy, and may receive a policy result from the plug-in, where the policy result is produced using the authentication information and a policy requirement identified by the policy identifier, and where the policy result identifies whether the client device complies with the policy.

Plug-in based policy evaluation

In general, the disclosure relates to techniques for identifying a reduced set of remediation actions that are to be performed by a network endpoint to achieve compliance with a security policy defined by a network entity. One example method comprises receiving integrity data via a network from a network endpoint, performing a plurality of tests on the integrity data to generate corresponding test results, identifying a set of remediation actions based upon the test results, and comparing the remediation actions in the set. The method further comprises eliminating at least one remediation action in the set based upon the comparison to form a reduced set of remediation actions, and sending the reduced set of remediation actions to the network endpoint, wherein each remediation action in the reduced set specifies an action to be performed by the network endpoint to achieve compliance with a security policy.

Determining a reduced set of remediation actions for endpoint integrity

A system receives user data associated with a user device and integrity policies associated with the user data, and distributes the user data and the integrity policies to one or more remote integrity servers. The system further receives integrity results from the one or more remote integrity servers based on the user data and the integrity policies, and collates the integrity results to formulate an access recommendation or a single integrity result for the user device.

Growing community of inventors

Newton, MA, United States of America

Steven Erickson