System gateway while accessing protected non-web resources connected to internet
AssigneeAirgap Networks Inc.
InventorsLokesh Mogra, Balireddy Ramesh Kumar Reddy, Satish M. Mohan, Vinay Adavi, Ritesh R. Agrawal
Life of this patent
Estimating the term…
Abstract
A technique to improve security for a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication. Message traffic is analyzed and anomalies are detected relative to normal message traffic that correspond to device health problems that may require service by a field technician. Access to a cloud-based resource may be further protected by enforcing user-based access policies.
Claims15
A method for ransomware protection in a Virtual Local Area Network (VLAN), comprising:
- setting a security appliance as a default gateway using a subnet mask of 255.255.255.255 to set the security appliance as a default gateway for a plurality of client endpoint devices of a shared VLAN environment, monitor intra-VLAN communication between the plurality of endpoint devices of the shared VLAN environment, and detect attributes of intra-LAN messages indicative of lateral propagation of ransomware between endpoint devices via intra-VLAN communication in the shared VLAN environment;
- and
- managing a secure private tunnel between a client endpoint device and private applications using a cloud gateway to enforce at least one user-based policy to control access to a private application or private data resource.
A computer-implemented method of ransomware protection in a Virtual Local Area Network (VLAN), comprising:
- setting a security appliance as a default gateway for a plurality of endpoint devices of the shared VLAN environment by using a subnet mask of 255.255.255.255, monitoring, by the security appliance, intra-VLAN communication between the plurality of endpoint devices of a shared VLAN environment, and detecting, by the security appliance, lateral propagation of ransomware between endpoint devices via intra-VLAN communication in the shared VLAN environment;
- managing a secure tunnel between an endpoint device and a protected resource using a cloud-based gateway to implement at least one user-based access policy for a user to use the secure tunnel to access a private application or a private data resource.
An apparatus for ransomware protection in a Virtual Local Area Network (VLAN), comprising:
- computer program instructions, stored on a non-transitory computer readable medium, which when executed on a process implements a method comprising:
- setting a security appliance as a default gateway for a plurality of endpoint devices of the shared VLAN environment by using a subnet mask of 255.255.255.255, monitoring, by the security appliance, intra-VLAN communication between the plurality of endpoint devices of the shared VLAN environment, and detecting, by the security appliance, lateral propagation of ransomware between endpoint devices via intra-VLAN communication in the shared VLAN environment;
- and
- managing a secure tunnel between an endpoint device and a protected resource using a cloud-based gateway to implement at least one user-based access policy for a user to use the secure tunnel to access a private application or a private data resource.
Dependencies are inferred from the claim text.