The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Mar. 17, 2026
Filed:
Jul. 31, 2023
Palo Alto Networks, Inc., Santa Clara, CA (US);
Pankaj Kumar Bhagra, Fremont, CA (US);
Sharad Saha, Santa Clara, CA (US);
Srinivasan Komandoor Santhanam, Sunnyvale, CA (US);
Eswar Rao Sadaram, San Jose, CA (US);
Palo Alto Networks, Inc., Santa Clara, CA (US);
Abstract
Flows corresponding to an overlapping IP address are differentiated via scalable techniques for appropriate enforcement security policies. Agents deployed to each site of a network (e.g., each VPC or branch router) encapsulate outbound packets with a header that includes an identifier that uniquely identifies the site as the origin of the packets, such as a VPC identifier or branch identifier. A session manager executing on a security appliance receives the encapsulated packets and determines the origin identifier and other packet attributes, including source/destination IP addresses, source/destination ports, and protocol. The session manager creates an N-tuple (e.g., a 6-tuple) comprising the origin identifier and packet attributes and creates a session for the flow with the N-tuple as the session key. The security appliance then enforces a security policy for the packets and subsequent packets that are part of the flow and match to the created session.