Back to results
US 11,909,767 B2Granted
Device visibility and scanning including network segments
AssigneeForescout Technologies, Inc.
InventorSiying Yang
Life of this patent
Estimating the term…
Abstract
Device scanning aspects are described. In certain aspects, the method includes configuring a port forwarding policy on a first device based on a network session information, performing a scan of a second device based on a port forwarding policy.
Claims20
A method comprising:
- configuring, by a processing device, a port forwarding policy on a first device based on network session information associated with the first device, wherein the network session information comprises a first address identifying the first device and a second address identifying a second device, wherein the second device is configured to communicate through the first device;
- generating, by the processing device, an identifier associated with the second device based on a combination of the first address and the second address of the network session information;
- scanning, by the processing device, the second device based on the identifier of the second device and the port forwarding policy, including sending, by the processing device, a scan request to the first device, wherein the first device forwards the scan request to the second device according to the port forwarding policy;
- and
- storing, by the processing device, the results of the scanning.
2 more elements
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- configure a port forwarding policy on a first device based on a network session information associated with the first device, wherein the network session information comprises a first address identifying the first device and a second address identifying a second device, wherein the second device is configured to communicate through the first device;
- generate an identifier associated with the second device based on a combination of the first address and the second address of the network session information;
- scan the second device based on the identifier of the second device and the port forwarding policy, including to send a scan request to the first device, wherein the first device forwards the scan request to the second device according to the port forwarding policy;
- and
- store the results of the scan in the memory.
5 more elements
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- configure, by the processing device, a port forwarding policy on a first device based on a network session information associated with the first device, wherein the network session information comprises a first address identifying the first device and a second address identifying a second device, wherein the second device is configured to communicate through the first device;
- generate an identifier associated with the second device based on a combination of the first address and the second address of the network session information;
- scan the second device based on the identifier of the second device and the port forwarding policy, including to send a scan request to the first device, wherein the first device forwards the scan request to the second device according to the port forwarding policy;
- and
- store the results of the scan.
2 more elements
Dependencies are inferred from the claim text.