Avaya Inc.

Extreme Networks, Inc.

Zscaler, Inc.

Sunil Menon

Seung Bong Han

Shailesh Patel

Carl Keene

Wu Miao

Sanket Ravindra Tandulwadkar

Kanti Varanasi

John A Chanak

William Fehring

Nikhil Bhatia

Seetharam V Rao

Prashantkumar Sthavarmath

Jane Joseph

Rakesh Adepu

Prashanth Kumar

Sunita Darbarwar

Mithun A S

Monica Bhaskaran

Ranganath Prativadi Bhayankara

Dejan Mihajlovic

Mohit Chawla

Mahesh Krishna Kumar

Abhijeet Malik

Sandip Davara

Systems and methods for a dynamically reconfigurable traffic inspection pipeline in zero trust networks. Methods include steps of intercepting traffic traversing through a zero trust network to a destination; determining one or more traffic inspection stages to utilize for inspecting the traffic based on the characteristics of the traffic; creating a traffic inspection pipeline including the one or more traffic inspection stages; and performing the one or more traffic inspection stages on the traffic through the traffic inspection pipeline. The steps can include dynamically adding or removing traffic inspection stages in the traffic inspection pipeline after performing a traffic inspection stage.

Dynamically reconfigurable traffic inspection pipeline in zero trust networks

Systems and methods for policy based agentless file transfer in zero trust private networks. Various systems and methods include receiving a request for a file transfer; determining a file transfer protocol; evaluating one or more criteria associated with the request, the criteria being associated with any of an end user and the contents of the file; and allowing or denying the file transfer based on the evaluating. Responsive to an end user's policy including a requirement for file inspection, the steps can further include sending the file to a sandbox for inspection, and receiving a result of the inspection from the sandbox.

Policy based agentless file transfer in zero trust private networks

Generating PKI credentials for authenticating a networking appliance attempting to attach to a network includes: receiving a certificate signing request (CSR) from the networking appliance, wherein the CSR comprises credential data associated with an identity of the networking appliance; generating an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and returning the appliance certificate to the networking appliance.

Public key infrastructure exchange using netconf for Openflow enabled switches

Implementations generally relate methods, systems, and computer readable media for discovery of an open network adapter. In some implementations, a method includes receiving, by a software-defined network (SDN) controller, a notification of an open networking adapter (ONA) establishing a connection with a switch, the ONA having an address associated therewith. The method further includes identifying the switch based on a lookup of the address of the ONA in forwarding tables of a neighboring switch of the SDN controller. The method further includes applying a service profile configuration to a port of the switch where the ONA is connected.

Discovery and configuration of an open networking adapter in a fabric network

Authenticating a networking appliance attempting to attach to a network includes receiving a request from the networking appliance to attach to the network, wherein the request comprises credential data associated with the networking appliance and a certificate authority (CA) certificate associated with the computer; receiving at least one value associated with an identity of the networking appliance; and authenticating the identity of the networking appliance based on both a) the at least one value associated with the identity of the networking appliance; and b) the appliance certificate.

Certificate-based dual authentication for openflow enabled switches

Authenticating a networking appliance attempting to attach to a network includes receiving at least one value associated with an identity of the networking appliance; receiving a certificate signing request (CSR) from the networking appliance, wherein the CSR comprises credential data associated with the identity of the networking appliance; and generating an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer. The method also includes returning the appliance certificate to the networking appliance; receiving a request from the networking appliance to attach to the network; and authenticating the identity of the networking appliance based on both a) the at least one value associated with the identity of the networking appliance; and b) the appliance certificate.

Customer-centric workflow for initial on-boarding of an OpenFlow enabled switch

Methods, systems and computer readable media for multi-device single network sign-on are described. For example, a method can include authenticating a first device for network access via a first authentication process, the first device being associated with a user account. The method can also include receiving an access request from a second device associated with the user account, and determining whether the second device is within an access perimeter of the first device. The method can further include permitting the second device to access the network without a second authentication process when the second device is within the access perimeter of the first device.

Multi-device single network sign-on

Methods, systems, and computer readable media for dynamically routing authentication requests are described. An embodiment can include receiving, at one or more computing devices, a network authentication request. An embodiment can also include creating, at the one or more computing devices, an authentication context based on information in the authentication request. An embodiment can also include dynamically routing, using the one or more computing devices, the authentication request to an authentication server.

Dynamic routing of authentication requests

Methods, systems and computer readable media for serving application specific policies based on dynamic context are described. In some implementations, the method can include determining a dynamic authentication context for a user including one or more access credentials, and authenticating the access credentials. The method can also include determining an indication of a need for a service-based policy, and generating a dynamic service-based policy based on the dynamic authentication context and an application. The method can further include providing the dynamic service-based policy to the application, and monitoring for a change in the dynamic authentication context. The method can also include updating the dynamic service-based policy.

Systems and methods for serving application specific policies based on dynamic context

Growing community of inventors

Los Gatos, CA, United States of America

Sunil Menon