Disaster recovery for a cloud-based security service
AssigneeZscaler, Inc.
InventorsPatrick Foxhoven, Amit Sinha, Vikas Mahajan, Rohit Goyal
Life of this patent
Estimating the term…
Abstract
Systems and methods include intercepting traffic on the user device; forwarding the traffic to a cloud-based system for security processing therein; and, responsive to unavailability of the cloud-based system preventing the forwarding, performing local security processing of the traffic at the user device including determining whether the traffic is allowed based on a cache at the user device, forwarding the traffic separate from the cloud-based system when it is allowed, and blocking the traffic when it is not allowed.
Claims20
A non-transitory computer-readable medium including instructions that, when executed, cause one or more processors associated with a user device to perform steps of:
- intercepting traffic at an application executing on the user device, the traffic being a request to access an enterprise application;
- forwarding the traffic to a cloud-based system for security processing therein;
- responsive to unavailability of the cloud-based system for providing security processing, preventing the forwarding and performing local security processing of the traffic at the application executing on the user device including determining whether the traffic is allowed based on consulting a plurality of local maps in a cache associated with the traffic at the user device;
- and
- responsive to the traffic being allowed based on the local security processing, causing the application executing on the user device to create one or more tunnels to an on-premises connector associated with the enterprise application separate from the cloud-based system, and blocking the traffic when it is not allowed at the application executing on the user device.
A user device comprising:
- a network interface, a data store, and a processor communicatively coupled to one another;
- and
- memory storing computer-executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to
- intercept traffic being sent over the network interface at an application executing on the user device, the traffic being a request to access an enterprise application;
- forward the traffic to a cloud-based system for security processing therein;
- responsive to unavailability of the cloud-based system for providing security processing, perform local security processing of the traffic at the application executing on the user device including determining whether the traffic is allowed based on consulting a plurality of local maps in a cache associated with the traffic at the user device;
- and
- responsive to the traffic being allowed based on the local security processing, causing the application executing on the user device to create one or more tunnels to an on-premises connector associated with the enterprise application separate from the cloud-based system, and blocking the traffic when it is not allowed at the application executing on the user device.
A method implemented by a user device, the method comprising:
- intercepting traffic at an application executing on the user device, the traffic being a request to access an enterprise application;
- forwarding the traffic to a cloud-based system for security processing therein;
- responsive to unavailability of the cloud-based system for providing security processing, preventing the forwarding and performing local security processing of the traffic at the application executing on the user device including determining whether the traffic is allowed based on consulting a plurality of local maps in a cache associated with the traffic at the user device;
- and
- responsive to the traffic being allowed based on the local security processing, causing the application executing on the user device to create one or more tunnels to an on-premises connector associated with the enterprise application separate from the cloud-based system, and blocking the traffic when it is not allowed at the application executing on the user device.
Dependencies are inferred from the claim text.