专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11088838B2 Automated authentication of a new network element 有权
公开(公告)号：US11088838B2
公开(公告)日：2021-08-10
申请号：US15977668
申请日：2018-05-11
申请人： PALO ALTO NETWORKS, INC.
发明人： Tushar J. Patel , Anupam Bharali , Stan Lee
IPC分类号： H04L9/32 , H04L9/06 , H04L9/08 , H04L29/06
摘要： The technology presented herein enables a new network element to be authenticated to other network elements automatically. In a particular embodiment, a method provides determining a current time relative to a first time. The first time is known to the new network element and a provisioning network element. The method further provides generating first beacon data using seed data stored on the new network element and the current time and generating keying data using the first beacon data and identification information associated with the new network element. The method also provides identifying a first one-time pad (OTP) from the keying data and using the first OTP to encrypt an authentication request for transfer from the new network element to the provisioning network element.

2. 发明申请

US20170195369A1 EXTERNALLY DEFINED OBJECTS IN SECURITY POLICY 审中-公开
公开(公告)号：US20170195369A1
公开(公告)日：2017-07-06
申请号：US15413405
申请日：2017-01-23
申请人： Palo Alto Networks, Inc.
发明人： Anupam Bharali
IPC分类号： H04L29/06
摘要： Using one or more externally defined objects to at least in part define a security policy is disclosed. In some embodiments, an external object list is obtained from an external list server, and a security policy comprising one or more rules based at least in part on one or more externally defined objects comprising the external object list and based at least in part on one or more locally defined objects is defined. The security policy is enforced with respect to one or more devices and periodically updated as the external object list is updated.

3. 发明申请

US20130318198A1 MANAGING NETWORK DEVICES 有权
标题翻译：管理网络设备
公开(公告)号：US20130318198A1
公开(公告)日：2013-11-28
申请号：US13853955
申请日：2013-03-29
申请人： Palo Alto Networks, Inc.
发明人： Nir Zuk , Anupam Bharali
IPC分类号： H04L12/24
CPC分类号： H04L41/084 , H04L41/0816 , H04L41/085
摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for configuring network devices. A central management system stores shared configuration objects in a central configuration database. A network device stores shared configuration objects and device-specific configuration objects in a local configuration database. The local configuration database's shared configuration objects correspond to shared configuration objects in the central configuration database. The central management system determines the network device has received a request to update a shared configuration object, where the request did not originate from the central management system, and updates the central configuration database.
摘要翻译：方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于配置网络设备。中央管理系统将共享配置对象存储在中央配置数据库中。网络设备将共享的配置对象和设备特定的配置对象存储在本地配置数据库中。本地配置数据库的共享配置对象与中央配置数据库中的共享配置对象相对应。中央管理系统确定网络设备已经接收到更新共享配置对象的请求，其中请求不是源于中央管理系统，并且更新中央配置数据库。

4. 发明授权

US10404750B2 Externally defined objects in security policy 有权
公开(公告)号：US10404750B2
公开(公告)日：2019-09-03
申请号：US15413405
申请日：2017-01-23
申请人： Palo Alto Networks, Inc.
发明人： Anupam Bharali
IPC分类号： H04L29/06 , G06F21/62
摘要： Using one or more externally defined objects to at least in part define a security policy is disclosed. In some embodiments, an external object list is obtained from an external list server, and a security policy comprising one or more rules based at least in part on one or more externally defined objects comprising the external object list and based at least in part on one or more locally defined objects is defined. The security policy is enforced with respect to one or more devices and periodically updated as the external object list is updated.

5. 发明授权

US09503424B2 Dynamic resolution of fully qualified domain name (FQDN) address objects in policy definitions 有权
公开(公告)号：US09503424B2
公开(公告)日：2016-11-22
申请号：US14807763
申请日：2015-07-23
申请人： Palo Alto Networks, Inc.
发明人： Anupam Bharali , Ajay Ghatge , Ravi Ithal
IPC分类号： H04L29/06 , H04L29/12 , H04L12/841
CPC分类号： H04L63/0236 , H04L47/286 , H04L61/1511 , H04L63/02 , H04L63/0227 , H04L63/1416 , H04L63/20
摘要： Dynamic resolution of Fully Qualified Domain Name (FQDN) address objects in policy definitions is provided. In some embodiments, dynamic resolution of Fully Qualified Domain Name (FQDN) address objects in policy definitions includes receiving a network policy that includes a domain name (e.g., the network policy can include a network security rule that is based on the domain name); and periodically updating Internet Protocol (IP) address information associated with the domain name by performing a Domain Name Server (DNS) query. In some embodiments, dynamic resolution of Fully Qualified Domain Name (FQDN) address objects in policy definitions includes dynamically performing a first local Domain Name Server (DNS) lookup for a first VSYS using a first DNS server on a first domain name for implementing a network policy based on the first domain name; dynamically performing a second local DNS lookup for a second VSYS using a second DNS server on the first domain name for implementing the network policy based on the first domain name; in which the network policy includes a network security rule that is based on the first domain name, and the network policy includes a network security rule that is based on the second domain name.

6. 发明授权

US09491047B2 Managing network devices 有权
公开(公告)号：US09491047B2
公开(公告)日：2016-11-08
申请号：US13759896
申请日：2013-02-05
申请人： Palo Alto Networks, Inc.
发明人： Nir Zuk , Ravi Ithal , Anupam Bharali
IPC分类号： G06F15/177 , H04L12/24 , H04L12/46 , H04L29/08 , H04L29/06
CPC分类号： H04L41/08 , H04L12/4679 , H04L41/0853 , H04L63/0272 , H04L67/10
摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for managing network devices. A central management system stores shared configuration objects in a central configuration database. A network device stores shared configuration objects and device-specific configuration objects in a local configuration database. The local configuration database's shared configuration objects correspond to shared configuration objects in the central configuration database. The network device can be configured locally or using the central management system.

7. 发明申请

US20150281285A1 DEPLOYING POLICY CONFIGURATION ACROSS MULTIPLE SECURITY DEVICES THROUGH HIERARCHICAL CONFIGURATION TEMPLATES 审中-公开
标题翻译：通过分层配置模板来处理多个安全设备的策略配置
公开(公告)号：US20150281285A1
公开(公告)日：2015-10-01
申请号：US14675337
申请日：2015-03-31
申请人： Palo Alto Networks, Inc.
发明人： Anupam Bharali , Kunal Kundu , Zhi Ning Wang
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , G06F17/30 , G06F21/00 , G06F21/604 , H04L63/02 , H04L63/08
摘要： Deploying policy configuration across multiple security devices through hierarchical configuration templates is disclosed. In some embodiments, deploying policy configuration across multiple security devices through hierarchical configuration templates for configuring a plurality of security devices includes receiving at a first security device a hierarchy of templates from a central management server, in which the hierarchy of templates includes configuration information for a group of security devices, and in which the first security device is included in the group of security devices; and reconciling on the first security device's configuration information included in the hierarchy of templates and device specific configuration based on local configuration information, in which the first security device performs an object level reconciliation to maintain device configuration consistency.
摘要翻译：公开了通过分层配置模板在多个安全设备之间部署策略配置。在一些实施例中，通过用于配置多个安全设备的分层配置模板来跨多个安全设备部署策略配置包括在第一安全设备处接收来自中央管理服务器的模板层级，其中模板层级包括用于一组安全设备，并且其中第一安全设备包括在安全设备组中; 并且基于第一安全设备的基于本地配置信息的模板层次结构中的配置信息和设备特定配置进行协调，其中第一安全设备执行对象级别协调以维持设备配置一致性。

8. 发明申请

US20210328799A1 AUTOMATED AUTHENTICATION OF A NEW NETWORK ELEMENT 有权
公开(公告)号：US20210328799A1
公开(公告)日：2021-10-21
申请号：US17305288
申请日：2021-07-02
申请人： Palo Alto Networks, Inc.
发明人： Tushar J. Patel , Anupam Bharali , Stan Lee
IPC分类号： H04L9/32 , H04L9/06 , H04L9/08 , H04L29/06
摘要： The technology presented herein enables a new network element to be authenticated to other network elements automatically. In a particular embodiment, a method provides determining a current time relative to a first time. The first time is known to the new network element and a provisioning network element. The method further provides generating first beacon data using seed data stored on the new network element and the current time and generating keying data using the first beacon data and identification information associated with the new network element. The method also provides identifying a first one-time pad (OTP) from the keying data and using the first OTP to encrypt an authentication request for transfer from the new network element to the provisioning network element.

9. 发明授权

US09602539B1 Externally defined objects in security policy 有权
公开(公告)号：US09602539B1
公开(公告)日：2017-03-21
申请号：US13631792
申请日：2012-09-28
申请人： Palo Alto Networks, Inc.
发明人： Anupam Bharali
IPC分类号： H04L29/06 , G06F21/62
CPC分类号： H04L63/20 , G06F21/6218 , H04L63/0236 , H04L63/0263 , H04L63/102
摘要： Using one or more externally defined objects to at least in part define a security policy is disclosed. In some embodiments, an external object list is obtained from an external list server, and a security policy comprising one or more rules based at least in part on one or more externally defined objects comprising the external object list and based at least in part on one or more locally defined objects is defined. The security policy is enforced with respect to one or more devices and periodically updated as the external object list is updated.

10. 发明授权

US09104745B1 Distributed log collector and report generation 有权
标题翻译：分布式日志收集器和报表生成
公开(公告)号：US09104745B1
公开(公告)日：2015-08-11
申请号：US13631804
申请日：2012-09-28
申请人： Palo Alto Networks, Inc.
发明人： Srinath Gutti , Anupam Bharali
IPC分类号： G06F17/30
CPC分类号： G06F17/30598
摘要： A distributed log collector and report generation architecture is disclosed. In some embodiments, a received query to generate a log report is forwarded to each of a plurality of log collector clusters, and responses to the query received from each of at least a subset of the plurality of log collector clusters are aggregated to generate the log report.
摘要翻译：公开了分布式日志收集器和报告生成体系结构。在一些实施例中，将接收到的用于生成日志报告的查询转发到多个日志收集器集群中的每一个，并且对从多个日志收集器集群的至少一个子集中的每一个收到的对查询的响应进行聚合以生成日志报告。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式