International Business Machines Corporation

Fortinet, Inc.

Opaq Networks, Inc.

Drawbridge Networks, Inc.

Thomas Cross

David Bryan Dewey

Michael C Starr

Takehiro Takahashi

Kenneth Ammon

Anurag Jain

Scott Michael Davis

John Ondy Terrill

Qiu Zhang

Systems and methods for a unified, cloud-managed platform for controlling enterprise network security are provided. According to one embodiment, a network of an enterprise is protected by a cloud-managed platform. An underlying architecture of the cloud-managed platform is abstracted by providing a portal through which modifications to security policies are expressed as business requirements of the enterprise. The security policies are automatically enforced regardless of location or endpoint. A policy digest, including information regarding the modifications and formatted according to a predefined format, generated and locally queued by the portal is retrieved. Security enforcement systems associated with the cloud-managed platform are configured to control communications to and from the network according to the security policies by generating API calls to the security enforcement systems and agents running on endpoints associated with the network are configured to control endpoint-to-endpoint connections according to the security policies based on the policy digest.

Systems and methods for centrally managed host and network firewall services

A method for protecting an enterprise network includes, at a system that is remote from the enterprise network: controlling communications to and from the enterprise network according to a set of security policies; controlling endpoint to endpoint connections within the enterprise network according to the set of security policies; receiving a request for modifications to the set of policies; automatically generating a policy digest formatted according to a predefined format, the policy digest comprising the modifications, and storing the policy digest in the memory; retrieving the policy digest from the memory; generating one or more calls to one or more system components that control the communications to and from the enterprise network and the endpoint to endpoint connections based on the policy digest; and modifying control of the communications and the endpoint to endpoint connections based on the one or more calls.

A method and apparatus for establishing a wireless connection. A digital certificate having a second name is obtained by a processor unit in response to receiving a selection of a network using a first name broadcast by a wireless access point. A determination is made by the processor unit as to whether the digital certificate is valid. A determination is made by the processor unit as to whether the second name in the digital certificate matches the first name broadcast by the wireless access point. The processor unit establishes the wireless connection to the wireless access point in response to the digital certificate being valid and the second name in the digital certificate matching the first name broadcast by the wireless access point.

Wireless connections to a wireless access point

A computer network security system includes a central controller in communication with software-based endpoint agents operating on individual host computers. The endpoint agents monitor new connection requests to and from their respective hosts, comparing the connections to cached rules obtained from the controller, and holding new connections while escalating requests for applicable rules and/or directives to the controller in real-time when no applicable rules are available in their caches. The endpoint agents can be configured to present a pop-up dialog requesting enhanced authentication credentials from a user on a host in response to a connection request from a restricted network-based application. The pop-up dialog enables enhanced or two-factor authentication functionality to be overlaid on any networked application regardless of the application's inherent authentication capability.

Computer network security system

Establishing a wireless connection to a wireless access point

Using information in a digital certificate to authenticate a network of a wireless access point

Growing community of inventors

Atlanta, GA, United States of America

Thomas Cross