专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08667146B2 Systems and methods for configuration driven rewrite of SSL VPN clientless sessions 有权
标题翻译：用于配置驱动重写SSL VPN无客户端会话的系统和方法
公开(公告)号：US08667146B2
公开(公告)日：2014-03-04
申请号：US12359998
申请日：2009-01-26
申请人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Anoop Reddy
发明人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Anoop Reddy
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions for an enterprise providing services to a variety of clients to enable the client to use the resources provided by the enterprise by modifying URLs received and the URLs from the responses from the servers to the client's requests before forwarding the requests and the responses to the intended destinations. An intermediary may identify an access profile for a clients' request to access a server via a clientless SSL VPN session. The intermediary may detect one or more URLs in content served by the server in response to the request using one or more regular expressions of the access profile. The intermediary may rewrite or modify, responsive to detecting, the one or more detected URLs in accordance with a URL transformation specified by one or more rewrite policies of the access profile. The response with modified URLs may be forwarded to the client.
摘要翻译：本公开提供了向各种客户端提供服务的企业的解决方案，以使得客户端能够在转发请求之前，通过修改从服务器的响应到客户端请求的接收到的URL和URL来使用企业提供的资源，并且对预期目的地的回应。中介可以识别客户端通过无客户端SSL VPN会话访问服务器的请求的访问配置文件。响应于使用访问简档的一个或多个正则表达式的请求，中介可以检测服务器所服务的内容中的一个或多个URL。根据由访问简档的一个或多个重写策略指定的URL变换，中介可以响应于检测到一个或多个检测到的URL来重写或修改。具有修改的URL的响应可以转发给客户端。

2. 发明授权

US07870277B2 Systems and methods for using object oriented expressions to configure application security policies 有权
标题翻译：使用面向对象表达式配置应用程序安全策略的系统和方法
公开(公告)号：US07870277B2
公开(公告)日：2011-01-11
申请号：US11685167
申请日：2007-03-12
申请人： Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Abhishek Chauhan
发明人： Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Abhishek Chauhan
IPC分类号： G06F15/16
CPC分类号： H04L41/0233 , H04L41/08 , H04L41/0893 , H04L43/0817 , H04L63/102 , H04L67/02
摘要： Systems and methods for configuring and evaluating policies that direct processing of one or more data streams are described. A configuration interface is described for allowing users to specify object oriented policies. These object oriented policies may allow any data structures to be applied with respect to a payload of a received packet stream, including any portions of HTTP traffic. A configuration interface may also allow the user to control the order in which policies and policy groups are executed, in addition to specifying actions to be taken if one or more policies are undefined. Systems and methods for processing the policies may allow efficient processing of object-oriented policies by applying potentially complex data structures to unstructured data streams. A device may also interpret and process a number of flow control commands and policy group invocation statements to determine an order of execution among a number of policies and policy groups. These policy configurations and processing may allow configuration and processing of complex network behaviors relating to load balancing, VPNs, SSL offloading, content switching, application security, acceleration, and caching.
摘要翻译：描述用于配置和评估直接处理一个或多个数据流的策略的系统和方法。描述了用于允许用户指定面向对象策略的配置界面。这些面向对象的策略可以允许针对所接收的分组流的有效载荷（包括HTTP流量的任何部分）应用任何数据结构。配置界面还可以允许用户控制执行策略和策略组的顺序，以及如果未定义一个或多个策略，则指定要采取的操作。用于处理策略的系统和方法可以允许通过将潜在的复杂数据结构应用于非结构化数据流来有效地处理面向对象的策略。设备还可以解释和处理多个流控制命令和策略组调用语句以确定多个策略和策略组中的执行顺序。这些策略配置和处理可能允许配置和处理与负载均衡，VPN，SSL卸载，内容切换，应用安全，加速和缓存相关的复杂网络行为。

3. 发明申请

US20080225719A1 SYSTEMS AND METHODS FOR USING OBJECT ORIENTED EXPRESSIONS TO CONFIGURE APPLICATION SECURITY POLICIES 有权
标题翻译：使用面向对象的表达式配置应用程序安全策略的系统和方法
公开(公告)号：US20080225719A1
公开(公告)日：2008-09-18
申请号：US11685167
申请日：2007-03-12
申请人： Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Abhishek Chauhan
发明人： Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Abhishek Chauhan
IPC分类号： G06F11/00
CPC分类号： H04L41/0233 , H04L41/08 , H04L41/0893 , H04L43/0817 , H04L63/102 , H04L67/02
摘要： Systems and methods for configuring and evaluating policies that direct processing of one or more data streams are described. A configuration interface is described for allowing users to specify object oriented policies. These object oriented policies may allow any data structures to be applied with respect to a payload of a received packet stream, including any portions of HTTP traffic. A configuration interface may also allow the user to control the order in which policies and policy groups are executed, in addition to specifying actions to be taken if one or more policies are undefined. Systems and methods for processing the policies may allow efficient processing of object-oriented policies by applying potentially complex data structures to unstructured data streams. A device may also interpret and process a number of flow control commands and policy group invocation statements to determine an order of execution among a number of policies and policy groups. These policy configurations and processing may allow configuration and processing of complex network behaviors relating to load balancing, VPNs, SSL offloading, content switching, application security, acceleration, and caching.
摘要翻译：描述用于配置和评估直接处理一个或多个数据流的策略的系统和方法。描述了用于允许用户指定面向对象策略的配置界面。这些面向对象的策略可以允许针对所接收的分组流的有效载荷（包括HTTP流量的任何部分）应用任何数据结构。配置界面还可以允许用户控制执行策略和策略组的顺序，以及如果未定义一个或多个策略，则指定要采取的操作。用于处理策略的系统和方法可以允许通过将潜在的复杂数据结构应用于非结构化数据流来有效地处理面向对象的策略。设备还可以解释和处理多个流控制命令和策略组调用语句以确定多个策略和策略组中的执行顺序。这些策略配置和处理可能允许配置和处理与负载均衡，VPN，SSL卸载，内容切换，应用安全，加速和缓存相关的复杂网络行为。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式