F5 Networks, Inc.

Array Networks, Inc.

Vinod Pisharody

Guang Yang

Amit Jain

Michael C Wu

Bipin Kumar

Wui Chung Lie

James Hu

Xia Zhifeng

Tanya Zhiltsova

Methods, non-transitory computer readable media, network traffic management apparatuses, and network traffic management systems that provide parameterized sub-policy evaluation for fine grain access control implemented by determining when there is a result for one of the plurality of sub-policies being evaluated for a received request for a resource during a session. The result for evaluation of the one of the plurality of sub-policies for the received request is used when the determination indicates the result is stored for the session. The one of the plurality of sub-policies is executed on the received request to obtain the result when the determination indicates the result is not stored for the session. The result for the one of the plurality of sub-policies from this execution is stored for the session.

Methods for parameterized sub-policy evaluation for fine grain access control during a session and devices thereof

A method, non-transitory computer readable medium, and access policy management computing device that obtains a first set of attributes based on a login request received from a client device. The first set of attributes includes at least credentials for a user of the client device. A persistent data store record for the user is identified and a second set of attributes associated with the user, and included in the persistent data store record, is imported into a session cache record for the user. A fingerprint including the second set of attributes is compared to the first set of attributes. A multifactor or single factor authentication is initiated based on a result of the comparison to determine when the credentials for the user are valid. A session for the user is established and access by the user to network resource(s) is allowed, when the credentials for the user are valid.

Methods for facilitating improved user authentication using persistent data and devices thereof

A system for load distribution using a mail proxy, which includes a client, a public network, and an Internet service provider (ISP) network, and a plurality of e-mail servers. The Internet service provider (ISP) network includes a virtual private network (VPN) device, which is configured to prevent unauthorized access to a private network. The VPN device also includes a mail proxy and an authentication and authorization module or service capable of at least the following: validating credentials of the client, and identifying at least one outgoing e-mail server and at least one incoming e-mail server for each client. The plurality of e-mail servers include a plurality of outgoing e-mail servers and a plurality of incoming e-mail servers.

System and method for load distribution using a mail box proxy of a virtual private network

A method of load distribution for a cluster of two or more nodes. The method comprises receiving an initial request packet on a network device having a virtual IP address; forwarding the request packet from the network device to a cluster of at least two nodes, wherein each of the at least two nodes has an internal dispatcher module and an unique and non-conflicting virtual IP address; establishing one of the at least two nodes as a priority dispatcher or dispatcher endpoint, wherein if any one node fails, the virtual IP address of the one node which is no longer active falls back to another node within the cluster based on cluster priorities; dispatching the request packet to one of the nodes associated with the cluster; and forwarding the request from one of the nodes to a switching device.

Growing community of inventors

San Jose, CA, United States of America

Vinod Pisharody