Fortinet, Inc.

Yong Zhang

Michael Xie

Xin Wang

Koroush Akhavan-Saraf

Ben Wilson

Andrew Q Ji

Peter Yongchun Liu

Reuben Stanley Wilson

Various systems, devices, storage media, and methods are discussed for performing secured access service edge (SASE) processing in a network potentially having multiple SASE processing capable devices.

Systems and methods for multiple point SASE access control

In network devices, during manufacturing, input for designation of a region code to be a non-specific region code is stored in a BIOS memory of the network device, and a specific region code is stored off the BIOS. During boot up, the BIOS is checked for a specific region code to regulate wireless transmissions at a physical location of operation. Responsive to receiving the non-specific region code from BIOS, the specific region code is requested from a region code server based on a network device identifier. Once received, the region code is stored in flash memory, until rebooted or otherwise reset, rather than BIOS.

Dynamic retrieval of region code for network devices on data communication networks

Methods and systems for standby controller aided failover are provided. According to one embodiment, an active control channel and an active data channel are established by an active controller with a managed device via a management protocol. A standby control channel and a standby data channel are established by a standby controller with the managed device via the management protocol. A keep-alive message is periodically sent by the standby controller to the active controller. When a response to the keep-alive message is not received by the standby controller within a predefined time, failover from the active controller to the standby controller is initiated by: (i) taking over for the active controller; and (ii) notifying the managed device to direct subsequent management protocol messages to the standby controller via the standby control channel.

Stand-by controller assisted failover

Methods and systems for caching of remote server MAC authentication to enable fast roaming are provided. According to one embodiment, a wireless network controller of a wireless local area network (WLAN) receives an authentication request relating to a wireless client device from a wireless access point (AP) managed by the wireless network controller. It is determined whether a prior authentication result associated with the client is present in a cache of the controller. The client is permitted to access the WLAN via the AP when the prior authentication result is present and indicates the client was previously successfully authenticated. The authentication request is issued to a remote authentication device associated with the WLAN to determine a current authentication status of the client. Responsive to receipt of the current authentication status, information regarding the current authentication status is stored by the controller within the cache.

Growing community of inventors

Belmont, CA, United States of America

Yong Zhang