The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 10, 2020

Filed:

Aug. 13, 2018
Applicant:

Akamai Technologies, Inc., Cambridge, MA (US);

Inventors:

Eugene (John) Neystadt, Kfar-Saba, IL;

Michael Graham, Weymouth, MA (US);

John Devasia, Coppell, TX (US);

Assignee:

Akamai Technologies, Inc., Cambridge, MA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/55 (2013.01); H04L 12/66 (2006.01); H04L 29/12 (2006.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/20 (2013.01); G06F 21/552 (2013.01); H04L 12/66 (2013.01); H04L 61/2585 (2013.01); H04L 63/0272 (2013.01); H04L 63/0281 (2013.01); H04L 63/10 (2013.01); H04L 63/1416 (2013.01); H04L 63/166 (2013.01); H04L 67/2814 (2013.01);
Abstract

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.


Find Patent Forward Citations

Loading…