US 11,601,438 B2 · Adjusting behavior of an endpoint security agent based on network location

Abstract

Systems and methods for adjusting the behavior of an endpoint security agent based on a network location are provided. According to an embodiment, an agent of an endpoint device identifies whether a security service of a cloud-based security service is not reachable or is unresponsive. The security service is associated with a particular security function implemented by the agent. When the security service is not reachable or is unresponsive, the agent further determines whether the endpoint device is within a trusted network of multiple trusted networks that have been previously registered with the cloud-based security service by querying a trusted network determination service associated with the cloud-based security service. When the determination is affirmative, the particular security feature is configured for operating inside a trusted network. When the determination is negative, the particular security feature is configured for operating outside a trusted network.

Claims12

Dependent claims

A method performed within an agent running on an endpoint device by a processing resource of the endpoint device, the method comprising:

identifying a security service of a cloud-based security service is not reachable or is unresponsive, wherein the security service is associated with a particular security function implemented by the agent;
when the security service is not reachable or is unresponsive, determining whether the endpoint device is within a trusted network of a plurality of trusted networks that have been previously registered with the cloud-based security service by querying a trusted network determination service associated with the cloud-based security service;
when said determining is affirmative, configuring the particular security function for operating inside one of the plurality of trusted networks;
and
when said determining is negative, configuring the particular security function for operation outside of the plurality of trusted networks.

2 more elements

An endpoint device comprising:

a processing resource;
and
a non-transitory computer-readable medium, coupled to the processing resource, having stored therein instructions that when executed by the processing resource cause the processing resource to perform a method comprising:
identifying, by an agent running on the endpoint device, a security service of a cloud-based security service is not reachable or is unresponsive, wherein the security service is associated with a particular security function implemented by the endpoint device;
when the security service is not reachable or is unresponsive, determining, by the agent, whether the endpoint device is within a trusted network of a plurality of trusted networks that have been previously registered with the cloud-based security service by querying a trusted network determination service associated with the cloud-based security service;
when said determining is affirmative, configuring, by the agent, the particular security function for operating inside one of the plurality of trusted networks;
and
when said determining is negative, configuring, by the agent, the particular security function for operation outside of the plurality of trusted networks.

5 more elements

Dependencies are inferred from the claim text.

Adjusting behavior of an endpoint security agent based on network location

Life of this patent

Adjusting behavior of an endpoint security agent based on network location

Life of this patent

Abstract

Claims12