Cisco Technology, Inc.

Palo Alto Networks, Inc.

Tripti Agarwal

John K Restrick, Jr

David Wayne Mills

Ho Bao

Rongxuan V Chen

Richard A Frisk

David R Daiker

Zhanglin He

Tushar Vyankatesh Nargunde

Jose Carlos Sagrero Dominguez

Kavitha Sivagnanam

John K Restrick

An orchestrator that manages security appliances for an organization determines a sink configured for traffic mirroring and correspondingly configures components for secure conveyance of mirrored traffic to a sink. The orchestrator configures a VM associated with the mirroring sink to use correlated packets and tunnel keys to securely convey the packets to an organization. The virtual machine decrypts each set of packets with the correlated tunnel key in memory and then re-encrypts the packets with a cryptographic key (hereinafter 'random key') generated on-the-fly for use on the current set of decrypted packets in memory. The virtual machine then encrypts the random key with a public key of the organization that will monitor and/or analyze the traffic data and writes the encrypted packets and/or packet contents and encrypted random key to a specified repository of the organization.

Securely deliver decrypted data of mirrored VPN traffic

According to an embodiment of the present invention, an apparatus for addressing compatibility in a session protocol environment is provided that includes a communications platform operable to communicate with a first endpoint and a second endpoint and to recognize signaling capabilities of the first and second endpoints. The apparatus also includes a media termination point (MTP) operable to communicate with the endpoints and the communications platform, the media termination point being provisioned by the communications platform in a stream that involves the first and second endpoints if a signaling compatibility issue is present amongst the endpoints. If an out-of-band digit from the first endpoint is received by the communications platform, the out-of-band digit is sent to the MTP, which is operable to inject a digit associated with the second protocol into the communication session such that a mapping occurs between the digits for the first and second protocols.

System and method for providing a compatibility feature in a session initiation protocol (SIP) environment

Growing community of inventors

Fremont, CA, United States of America

Tripti Agarwal