专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090193126A1 SYSTEMS AND METHODS FOR CONFIGURATION DRIVEN REWRITE OF SSL VPN CLIENTLESS SESSIONS 有权
标题翻译：用于配置驱动SSL VPN客户端会话的系统和方法
公开(公告)号：US20090193126A1
公开(公告)日：2009-07-30
申请号：US12359998
申请日：2009-01-26
申请人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapatti , Prakash Khemani , Rajiv Mirani , Anoop Reddy
发明人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapatti , Prakash Khemani , Rajiv Mirani , Anoop Reddy
IPC分类号： G06F15/173
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions for an enterprise providing services to a variety of clients to enable the client to use the resources provided by the enterprise by modifying URLs received and the URLs from the responses from the servers to the client's requests before forwarding the requests and the responses to the intended destinations. An intermediary may identify an access profile for a clients' request to access a server via a clientless SSL VPN session. The intermediary may detect one or more URLs in content served by the server in response to the request using one or more regular expressions of the access profile. The intermediary may rewrite or modify, responsive to detecting, the one or more detected URLs in accordance with a URL transformation specified by one or more rewrite policies of the access profile. The response with modified URLs may be forwarded to the client.
摘要翻译：本公开提供了向各种客户端提供服务的企业的解决方案，以使得客户端能够在转发请求之前通过修改所接收的URL和从服务器的响应到客户端的请求来使用由企业提供的资源，并且对预期目的地的回应。中介可以识别客户端通过无客户端SSL VPN会话访问服务器的请求的访问配置文件。响应于使用访问简档的一个或多个正则表达式的请求，中介可以检测服务器所服务的内容中的一个或多个URL。根据由访问简档的一个或多个重写策略指定的URL变换，中介可以响应于检测到一个或多个检测到的URL来重写或修改。具有修改的URL的响应可以转发给客户端。

2. 发明授权

US08667146B2 Systems and methods for configuration driven rewrite of SSL VPN clientless sessions 有权
标题翻译：用于配置驱动重写SSL VPN无客户端会话的系统和方法
公开(公告)号：US08667146B2
公开(公告)日：2014-03-04
申请号：US12359998
申请日：2009-01-26
申请人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Anoop Reddy
发明人： Puneet Agarwal , Srinivasan Thirunarayanan , Vamsi Korrapati , Prakash Khemani , Rajiv Mirani , Anoop Reddy
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions for an enterprise providing services to a variety of clients to enable the client to use the resources provided by the enterprise by modifying URLs received and the URLs from the responses from the servers to the client's requests before forwarding the requests and the responses to the intended destinations. An intermediary may identify an access profile for a clients' request to access a server via a clientless SSL VPN session. The intermediary may detect one or more URLs in content served by the server in response to the request using one or more regular expressions of the access profile. The intermediary may rewrite or modify, responsive to detecting, the one or more detected URLs in accordance with a URL transformation specified by one or more rewrite policies of the access profile. The response with modified URLs may be forwarded to the client.
摘要翻译：本公开提供了向各种客户端提供服务的企业的解决方案，以使得客户端能够在转发请求之前，通过修改从服务器的响应到客户端请求的接收到的URL和URL来使用企业提供的资源，并且对预期目的地的回应。中介可以识别客户端通过无客户端SSL VPN会话访问服务器的请求的访问配置文件。响应于使用访问简档的一个或多个正则表达式的请求，中介可以检测服务器所服务的内容中的一个或多个URL。根据由访问简档的一个或多个重写策略指定的URL变换，中介可以响应于检测到一个或多个检测到的URL来重写或修改。具有修改的URL的响应可以转发给客户端。

3. 发明授权

US08769660B2 Systems and methods for proxying cookies for SSL VPN clientless sessions 有权
标题翻译：用于代理SSL VPN无客户端会话的Cookie的系统和方法
公开(公告)号：US08769660B2
公开(公告)日：2014-07-01
申请号：US12360019
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
IPC分类号： G06F15/16
CPC分类号： H04L63/0227 , H04L63/0272 , H04L63/0281 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/28 , H04L67/2842
摘要： The present application enables the enterprise to configure various policies to address various subsets of the traffic based on various information relating the client, the server, or the details and nature of the interactions between the client and the server. An intermediary deployed between clients and servers may establish an SSL VPN session between a client and a server. The intermediary may receiving a response from a server to a request of a client via the clientless SSL VPN session. The response may comprise one or more cookies. The intermediary may identify an access profile for the clientless SSL VPN session. The access profile may identify one or more policies for proxying cookies. The intermediary may determine, responsive to the one or more policies of the access profile, whether to proxy or bypass proxying for the client the one or more cookies.
摘要翻译：本应用使得企业能够基于与客户端，服务器或客户端与服务器之间的交互的细节和性质相关的各种信息来配置各种策略来处理流量的各种子集。部署在客户端和服务器之间的中介可以在客户端和服务器之间建立SSL VPN会话。中间人可以通过无客户端SSL VPN会话从服务器接收到客户端的请求的响应。响应可以包括一个或多个cookie。中介可以识别无客户端SSL VPN会话的访问配置文件。访问配置文件可以标识用于代理Cookie的一个或多个策略。中介可以响应于访问简档的一个或多个策略来确定是否为客户端代理或绕过代理一个或多个cookie。

4. 发明授权

US08893259B2 Systems and methods for fine grain policy driven clientless SSL VPN access 有权
标题翻译：细粒度策略驱动客户端SSL VPN访问的系统和方法
公开(公告)号：US08893259B2
公开(公告)日：2014-11-18
申请号：US12359982
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , Akshat Choudhary
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , Akshat Choudhary
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions that may enable an enterprise providing services to a number of clients to determine whether to establish a client based SSL VPN session or a clientless SSL VPN session with a client based on an information associated with the client. An intermediary establishing SSL VPN sessions between clients and servers may receive a request from a client to access a server. The intermediary may identify a session policy based on the request. The session policy may indicate whether to establish a client based SSL VPN session or clientless SSL VPN session with the server. The intermediary may determine, responsive to the policy, to establish a clientless or client based SSL VPN session between the client and the server.
摘要翻译：本公开提供了可以使得能够向多个客户端提供服务的企业基于与客户端相关联的信息来确定是否建立与客户端的基于客户端的SSL VPN会话或客户端SSL VPN会话的解决方案。在客户端和服务器之间建立SSL VPN会话的中间件可以接收客户端访问服务器的请求。中介可以根据请求识别会话策略。会话策略可以指示是否与服务器建立基于客户端的SSL VPN会话或客户端SSL VPN会话。中介可以根据策略确定在客户端和服务器之间建立基于客户端或客户端的SSL VPN会话。

5. 发明授权

US08090877B2 Systems and methods for fine grain policy driven cookie proxying 有权
标题翻译：细粒度政策驱动的Cookie代理的系统和方法
公开(公告)号：US08090877B2
公开(公告)日：2012-01-03
申请号：US12360014
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
IPC分类号： G07F15/16
CPC分类号： H04L63/0227 , H04L63/0272 , H04L63/0281 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/28 , H04L67/2842
摘要： The present solution enables a client that is not configured to use cookies to access resources of the server that uses cookies for communications with the clients. An intermediary deployed between a client and a server intercepts and modifies transmissions between the client and the server to compensate for the mismatch in configuration of the cookies between the client and the server. The present disclosure relates to a method for managing cookies by an intermediary for a client. An intermediary receives a response from a server to a request of a client. The response may comprise a uniform resource locator (URL) and a cookie. The intermediary may modify the response by removing the cookie from the response and inserting a unique client identifier into the URL. The intermediary may store the removed cookie in association with the unique client identifier and forward the modified response to the client.
摘要翻译：本解决方案使未配置为使用Cookie的客户端访问使用Cookie与客户端通信的服务器的资源。部署在客户端和服务器之间的中间人拦截并修改客户端和服务器之间的传输，以补偿客户端和服务器之间的Cookie配置不匹配。本公开涉及一种用于由客户端的中间人管理cookie的方法。中介从服务器接收到客户端请求的响应。响应可以包括统一的资源定位符（URL）和cookie。中间人可以通过从响应中删除cookie并将唯一的客户端标识符插入到URL中来修改响应。中介可以将删除的cookie与唯一的客户端标识符相关联地存储，并将修改的响应转发给客户端。

6. 发明申请

US20090199285A1 Systems and Methods for For Proxying Cookies for SSL VPN Clientless Sessions 有权
标题翻译：用于代理SSL VPN客户端会话的Cookie的系统和方法
公开(公告)号：US20090199285A1
公开(公告)日：2009-08-06
申请号：US12360019
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
IPC分类号： H04L9/32
CPC分类号： H04L63/0227 , H04L63/0272 , H04L63/0281 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/28 , H04L67/2842
摘要： The present application enables the enterprise to configure various policies to address various subsets of the traffic based on various information relating the client, the server, or the details and nature of the interactions between the client and the server. An intermediary deployed between clients and servers may establish an SSL VPN session between a client and a server. The intermediary may receiving a response from a server to a request of a client via the clientless SSL VPN session. The response may comprise one or more cookies. The intermediary may identify an access profile for the clientless SSL VPN session. The access profile may identify one or more policies for proxying cookies. The intermediary may determine, responsive to the one or more policies of the access profile, whether to proxy or bypass proxying for the client the one or more cookies.
摘要翻译：本应用使得企业能够基于与客户端，服务器或客户端与服务器之间的交互的细节和性质相关的各种信息来配置各种策略来处理流量的各种子集。部署在客户端和服务器之间的中介可以在客户端和服务器之间建立SSL VPN会话。中间人可以通过无客户端SSL VPN会话从服务器接收到客户端的请求的响应。响应可以包括一个或多个cookie。中介可以识别无客户端SSL VPN会话的访问配置文件。访问配置文件可以标识用于代理Cookie的一个或多个策略。中介可以响应于访问简档的一个或多个策略来确定是否为客户端代理或绕过代理一个或多个cookie。

7. 发明申请

US20090193498A1 SYSTEMS AND METHODS FOR FINE GRAIN POLICY DRIVEN CLIENTLESS SSL VPN ACCESS 有权
标题翻译：精细粒度政策驱动客户端SSL VPN访问的系统和方法
公开(公告)号：US20090193498A1
公开(公告)日：2009-07-30
申请号：US12359982
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , Akshat Choudhary
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , Akshat Choudhary
IPC分类号： H04L9/00
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions that may enable an enterprise providing services to a number of clients to determine whether to establish a client based SSL VPN session or a clientless SSL VPN session with a client based on an information associated with the client. An intermediary establishing SSL VPN sessions between clients and servers may receive a request from a client to access a server. The intermediary may identify a session policy based on the request. The session policy may indicate whether to establish a client based SSL VPN session or clientless SSL VPN session with the server. The intermediary may determine, responsive to the policy, to establish a clientless or client based SSL VPN session between the client and the server.
摘要翻译：本公开提供了可以使得能够向多个客户端提供服务的企业基于与客户端相关联的信息来确定是否建立与客户端的基于客户端的SSL VPN会话或客户端SSL VPN会话的解决方案。在客户端和服务器之间建立SSL VPN会话的中间件可以接收客户端访问服务器的请求。中介可以根据请求识别会话策略。会话策略可以指示是否与服务器建立基于客户端的SSL VPN会话或客户端SSL VPN会话。中介可以根据策略确定在客户端和服务器之间建立基于客户端或客户端的SSL VPN会话。

8. 发明申请

US20090193129A1 Systems and Methods for Fine Grain Policy Driven Cookie Proxying 有权
标题翻译：细粒度政策驱动的Cookie代理的系统和方法
公开(公告)号：US20090193129A1
公开(公告)日：2009-07-30
申请号：US12360014
申请日：2009-01-26
申请人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
发明人： Puneet Agarwal , Saibal Kumar Adhya , Srinivasan Thirunarayanan , James Harris
IPC分类号： G06F15/16
CPC分类号： H04L63/0227 , H04L63/0272 , H04L63/0281 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/28 , H04L67/2842
摘要： The present solution enables a client that is not configured to use cookies to access resources of the server that uses cookies for communications with the clients. An intermediary deployed between a client and a server intercepts and modifies transmissions between the client and the server to compensate for the mismatch in configuration of the cookies between the client and the server. The present disclosure relates to a method for managing cookies by an intermediary for a client. An intermediary receives a response from a server to a request of a client. The response may comprise a uniform resource locator (URL) and a cookie. The intermediary may modify the response by removing the cookie from the response and inserting a unique client identifier into the URL. The intermediary may store the removed cookie in association with the unique client identifier and forward the modified response to the client.
摘要翻译：本解决方案使未配置为使用Cookie的客户端访问使用Cookie与客户端通信的服务器的资源。部署在客户端和服务器之间的中间人拦截并修改客户端和服务器之间的传输，以补偿客户端和服务器之间的Cookie配置不匹配。本公开涉及一种用于由客户端的中间人管理cookie的方法。中介从服务器接收到客户端请求的响应。响应可以包括统一的资源定位符（URL）和cookie。中间人可以通过从响应中删除cookie并将唯一的客户端标识符插入到URL中来修改响应。中介可以将删除的cookie与唯一的客户端标识符相关联地存储，并将修改的响应转发给客户端。

9. 发明授权

US09253252B2 Systems and methods for cloud bridging between intranet resources and cloud resources 有权
标题翻译：内部网资源和云资源之间的云桥接系统和方法
公开(公告)号：US09253252B2
公开(公告)日：2016-02-02
申请号：US13464818
申请日：2012-05-04
申请人： Puneet Agarwal , Deepak Goel , Mugdha Agarwal , Anil Kumar Gavini , Jyotheesh Rao Kurma , Arkesh Kumar , Shaleen Sharma
发明人： Puneet Agarwal , Deepak Goel , Mugdha Agarwal , Anil Kumar Gavini , Jyotheesh Rao Kurma , Arkesh Kumar , Shaleen Sharma
IPC分类号： H04L12/46 , H04L29/08 , H04L29/06
CPC分类号： H04L67/1002 , H04L12/4625 , H04L12/4633 , H04L12/4641 , H04L63/0227 , H04L63/0272 , H04L63/164
摘要： Embodiments of the present solution provide a cloud bridge to bring network transparency between the otherwise disparate networks of the datacenter and cloud service provider. For example, appliances may be deployed in the datacenter and on the edge of the cloud. These appliances may be configured or designed and constructed to communicate with each other and recognize and understand the local IP and/or public IP network information of the on-premise datacenter of the enterprise and the cloud datacenter. These appliances may manage the flow of network traffic between the on-premise and cloud datacenters in a manner to appear and act seamlessly and transparently as a single network spanning both the on-premise and cloud data centers.
摘要翻译：本解决方案的实施例提供了一种云桥，以在数据中心和云服务提供商的不同网络之间带来网络透明度。例如，设备可能部署在数据中心和云端。这些设备可以被配置或设计和构造成彼此通信，并且识别和理解企业和云数据中心的内部部署数据中心的本地IP和/或公共IP网络信息。这些设备可以以内部和云数据中心的单一网络的方式无缝和透明地管理内部部署和云数据中心之间的网络流量流。

10. 发明授权

US08667575B2 Systems and methods for AAA-traffic management information sharing across cores in a multi-core system 有权
标题翻译：在多核系统中跨核心的AAA流量管理信息共享的系统和方法
公开(公告)号：US08667575B2
公开(公告)日：2014-03-04
申请号：US12976688
申请日：2010-12-22
申请人： Ravindranath Thakur , Puneet Agarwal , Arkesh Kumar , Rui Li
发明人： Ravindranath Thakur , Puneet Agarwal , Arkesh Kumar , Rui Li
IPC分类号： G06F9/00 , G06F15/16 , G06F17/00 , G06F7/04 , G06F17/30 , H04L29/06
CPC分类号： G06F21/41
摘要： A method for propagating authentication session information to a plurality of cores of a multi-core device includes establishing, by an authentication virtual server executing on a first core of a device intermediary to at least one client and server, a session for a user, the authentication virtual server authenticating the session. A traffic management virtual server executes on a second core of device, and receives a request to access a server via the session. The traffic management virtual server may identify, responsive to a determination that the session is not stored by the second core, from an identifier of the session that the first core established the session. The second core may send to the first core a request for data for the session identified by the identifier. The second core may receive from the first core a response to the second request identifying whether the session is valid.
摘要翻译：用于将认证会话信息传播到多核设备的多个核心的方法包括：通过在至少一个客户端和服务器的中间设备的第一核心上执行的认证虚拟服务器建立用户的会话，验证虚拟服务器认证会话。流量管理虚拟服务器在设备的第二核心上执行，并且经由会话接收到访问服务器的请求。业务管理虚拟服务器可以响应于确定该会话未被第二核心存储的第一核心建立会话的会话标识符。第二核心可以向第一核心发送由标识符标识的会话的数据请求。第二核心可以从第一核心接收对第二请求的响应，以识别会话是否有效。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式