Palo Alto Networks, Inc.

Cisco Technology, Inc.

Zhipu Jin

Martin Walter

Song Wang

Michael Soren Jacobsen

Wilson Xu

Suiqiang Deng

Benoit Claise

Paul J Aitken

Stanford Louis Yates

Amro A Younes

Gowri Dhandapani

Nagaraj Varadharajan

Nicholai Gian Piagentini

Enforcing a policy is described. A mapping between an IP address of a device and a user identity is identified at a first appliance, at least in part by correlating event information. The mapping is transmitted to a second appliance. A policy is applied by the second appliance to the device based at least in part on the user identity.

User-ID information propagation among appliances

Enforcing a policy is described. System log messages are received, via an interface, from a network device. At least a portion of the received system log messages are parsed to obtain an IP address and to obtain a user identifier. A policy to apply to a session associated with the IP address is determined, based at least in part on the user identifier. The policy is applied to the session.

Using log event messages to identify a user and enforce policies

Policy enforcement in an environment that includes virtualized systems is disclosed. Virtual machine information associated with a first virtual machine instance executing on a host machine is received. The information can be received from a variety of sources, including an agent, a log server, and a management infrastructure associated with the host machine. A policy is applied based at least in part on the received virtual machine information.

Policy enforcement in a virtualized environment

Policy enforcement in virtualized environment

An apparatus is provided in one example embodiment and includes a network element configured to receive a plurality of packets. The network element is configured to couple to a module, the module being configured to generate a data record that is based on information associated with the packets and capable of being interpreted according to a template in which multiple information elements can be positioned to create a hierarchical relationship within structured data. The structured data further includes references to the information elements. The network element further including an export module configured to export the data record to a next destination.

System and method for exporting structured data in a network environment

Growing community of inventors

Milpitas, CA, United States of America

Zhipu Jin