Cloud management of connectivity for edge networking devices

A system comprising:

• an endpoint in a zero trust network access environment;
• a zero trust application for the endpoint;
• a gateway for connecting the endpoint to access the zero trust application, the gateway hosted on a first cloud computing platform;
• a processor and a memory;
• and
• a threat management facility for an enterprise network, the threat management facility hosted on a second cloud computing platform independent from the first cloud computing platform and the threat management facility in communication with the processor and the memory, the memory storing computer executable instructions embodied in a non-transitory computer readable medium that configure the threat management facility to perform the steps of:
• detecting a connection of the gateway to the threat management facility;
• storing connection information for the connection of the gateway in a data store associated with the threat management facility;
• detecting a disconnection of the gateway;
• storing disconnection information for the disconnection of the gateway in the data store associated with the threat management facility;
• asynchronously analyzing the disconnection to determine if the disconnection occurred according to a connection reset rule for the second cloud computing platform hosting the threat management facility by applying one or more rules to the connection information and the disconnection information stored in the data store;
• and
• in response to determining that the disconnection did not occur according to the connection reset rule for the second cloud computing platform, initiating a remediation of the gateway.

A method comprising:

• detecting a connection of an edge networking device to a threat management facility hosted for an enterprise network on a cloud computing platform;
• storing connection information for the connection of the edge networking device, the connection information including a time stamp for a time of creation of the connection;
• detecting a disconnection of the edge networking device;
• storing disconnection information for the disconnection of the edge networking device, the disconnection information including a second time stamp for a second time of the disconnection;
• asynchronously analyzing the disconnection to determine if the disconnection occurred according to a connection reset rule for the cloud computing platform hosting the threat management facility;
• and
• in response to determining that the disconnection did not occur according to the connection reset rule for the cloud computing platform, initiating a remediation of the edge networking device.