Dynamic hyper context-driven microsegmentation
AssigneeNetskope, Inc.
InventorsSrinivas Akella, Arun Kumar Dheena
Life of this patent
Estimating the term…
Abstract
Systems and methods for dynamic, hyper context-based microsegmentation are described. In one aspect, a computing device is detected on a network. A network hyper context is assigned to the computing device based on network properties and computing device properties associated with the computing device. A policy defining a segment identifier identifying a network segment and corresponding to the network hyper context is accessed. The segment identifier is assigned to the computing device. The computing device is segmented onto the network responsive to detecting the computing device.
Claims22
A method comprising:
- detecting a computing device on a network;
- assigning a network hyper context to the computing device based on network properties and computing device properties associated with the computing device;
- accessing a policy defining a segment identifier identifying a network segment and corresponding to the network hyper context;
- assigning the segment identifier to the computing device;
- and
- segmenting the computing device onto the network segment responsive to detecting the computing device.
A method comprising:
- detecting a computing device on a computer network;
- assigning a computer network hyper context to the computing device based on network properties and computing device properties associated with the computing device;
- accessing a policy defining a virtual local area network (VLAN) identifier identifying a VLAN and corresponding to the computer network hyper context;
- assigning the VLAN identifier to the computing device;
- and
- segmenting the computing device onto the VLAN responsive to detecting the computing device.
An apparatus comprising:
- a network traffic controller associated with a network, the network traffic controller configured to enable an interface of a computing device the network;
- a hyper context network sensor configured to observe span traffic associated with the network and detect the computing device on the network via the network traffic controller;
- a hyper context cloud server configured to receive data associated with the span traffic, assign a network hyper context to the computing device based on network properties and computing device properties associated with the computing device, and access a policy defining a segment identifier identifying a network segment and corresponding to the network hyper context;
- and
- a cloud controller configured to segment the computing device onto the network segment responsive to detecting the computing device.
Dependencies are inferred from the claim text.