Localization at scale for a cloud-based security service
AssigneePalo Alto Networks, Inc.
InventorsThomas Arthur Warburton, Shu Lin, Devendra Raut, Jialiang Li, Hao Long
Life of this patent
Estimating the term…
Abstract
Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.
Claims20
A system comprising:
- a processor configured to:
- perform a source Network Address Translation (NAT) from a registered set of public Internet Protocol (IP) addresses associated with a tenant in response to a connection request at a network gateway of a security service, wherein an egress IP from the network gateway is associated with a region that corresponds to the region of a user that sent the connection request to facilitate an enhanced user experience of locality for a user of a Software as a Service (SaaS);
- and
- provide secure access to a Software as a Service (SaaS) using the security service, wherein the security service maintains a set of IP address ranges for each of their supported regions to provide distinct public IP address pools for each customer of the security service, and wherein the security service is provided using a public cloud service provider or a plurality of public cloud service providers;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method comprising:
- performing a source Network Address Translation (NAT) from a registered set of public Internet Protocol (IP) addresses associated with a tenant in response to a connection request at a network gateway of a security service, wherein an egress IP from the network gateway is associated with a region that corresponds to the region of a user that sent the connection request to facilitate an enhanced user experience of locality for a user of a Software as a Service (SaaS);
- and
- providing secure access to a Software as a Service (SaaS) using the security service, wherein the security service maintains a set of IP address ranges for each of their supported regions to provide distinct public IP address pools for each customer of the security service, and wherein the security service is provided using a public cloud service provider or a plurality of public cloud service providers.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- performing a source Network Address Translation (NAT) from a registered set of public Internet Protocol (IP) addresses associated with a tenant in response to a connection request at a network gateway of a security service, wherein an egress IP from the network gateway is associated with a region that corresponds to the region of a user that sent the connection request to facilitate an enhanced user experience of locality for a user of a Software as a Service (SaaS);
- and
- providing secure access to a Software as a Service (SaaS) using the security service, wherein the security service maintains a set of IP address ranges for each of their supported regions to provide distinct public IP address pools for each customer of the security service, and wherein the security service is provided using a public cloud service provider or a plurality of public cloud service providers.
Dependencies are inferred from the claim text.