Fortinet, Inc.

Weining Wu

Jinhai Yang

Kunal Marwah

Xu Zheng

GangGang Zhang

Yannick Dubuc

Jonathan K Seanor

Ronald Foo

Hai Liu

Heng Du

Yugang Du

Systems, devices, and methods are discussed for limiting exposure of internal network operations beyond the boundary of a secure network.

Systems and methods for internal secure network resolution

Systems and methods for providing an HA IPsec VPN client. According to one embodiment, an IPsec tunnel is established by a client with a VPN gateway through a first interface. An IP address of the first interface is bound as the local endpoint of the tunnel and the IP address of the VPN gateway is bound as the remote endpoint of the tunnel. Responsive to detection by the client that a second interface of the client machine has been selected to serve as the local endpoint, an IP address of the second interface is bound as the local endpoint. An IP packet is transmitted by the client machine to the VPN gateway by generating an ESP packet including an encrypted form of the IP packet and encapsulating the ESP packet with an outer IP header including the IP address of the second interface.

High availability (HA) internet protocol security (IPSEC) virtual private network (VPN) client

Methods and systems for integrating a sandboxing service and distributed threat intelligence within an endpoint security application are provided. According to one embodiment, The method includes file system or operating system activity relating to a file accessible to an endpoint system is monitored by an endpoint security application running on the endpoint system. The endpoint security application determines whether the file has been previously analyzed for a threat status. When a result of the determining is negative, then the endpoint security application requests the threat status by submitting the file to a remote threat analysis engine with a request to perform a threat analysis on the file. Based on the determined threat status, the endpoint security application selectively allows or disallows performance of the file system or operating system activity.

Sandboxing protection for endpoints

Growing community of inventors

Surrey, Canada

Weining Wu