# US 12,015,594 B2 · Policy integration for cloud-based explicit proxy > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,594 B2 - Document ID: US12015594B2 - Status: Granted - Kind: B2 - Application number: 17/190,603 - Filed: 2021-03-03 - Published: 2022-03-31 - Granted: 2024-06-18 - Earliest claimed: 2020-09-25 - Assignees: Forcepoint LLC - Applicants: Forcepoint LLC - Inventors: Olli-Pekka Niemi; Ville K. Mattila - Web page: https://patentgrep.com/patent/US12015594B2 ## CPC - H04L 41/0893: Assignment of logical groups to network elements - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - H04L 41/046: comprising network management agents or mobile agents therefor - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - H04L 41/0886: {Fully automatic configuration} - H04L 41/0894: Policy-based network configuration management - H04L 41/0895: Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements - H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities - H04L 61/4511: using domain name system [DNS] - H04L 61/58: Caching of addresses or names - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/0263: {Rule management} - H04L 63/0281: {Proxies} - H04L 67/568: Storing data temporarily at an intermediate stage, e.g. caching - H04L 41/142: using statistical or mathematical methods - H04L 41/145: {involving simulating, designing, planning or modelling of a network} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system for processing data that includes a first processor configured to operate one or more algorithms to provide a proxy for each of a plurality of external network communications segments and internal network communications segments associated with a specific use, the first processor configured to operate one or more algorithms to provide a firewall agent that performs firewall processing for each of the plurality of external network communications segments and the internal network communications segments and wherein the explicit proxy is installed using a proxy auto configuration file that is associated with the firewall agent. ## Claims ### Claim 1 A system for processing data, comprising: a first processor configured to operate one or more algorithms to provide a proxy server of a separate cloud computing instance for each of a plurality of external network communications segments that are each associated with a specific user and internal network communications segments that are each associated with the specific user; the first processor configured to operate one or more algorithms to provide a firewall agent that performs firewall processing for each of the plurality of external network communications segments and the internal network communications segments; and wherein the proxy server is installed using a proxy auto configuration file that is associated with the firewall agent. ### Claim 2 (depends on 1) The system of claim 1 wherein the proxy server is implemented on a cloud processing platform that instantiates the proxy server on demand for the specific user using a docker container of an integrated suite of docker containers that is instantiated on demand. ### Claim 3 (depends on 1) The system of claim 1 wherein the proxy server is implemented on a cloud processing platform that instantiates the proxy server on demand using a first docker container and an associated DNS cache resolver using a second docker container that is instantiated on demand at the server. ### Claim 4 (depends on 1) The system of claim 1 wherein the proxy server is implemented on a cloud processing platform that instantiates the proxy server on demand using a container logic structure. ### Claim 5 (depends on 1) The system of claim 1 wherein the proxy server is implemented on a cloud processing platform that instantiates the proxy server on demand and that separately instantiates an associated DNS cache resolver on demand using separate container logic structures. ### Claim 6 (depends on 1) The system of claim 1 wherein the proxy server is implemented on a cloud processing platform that instantiates the proxy server on demand and that separately instantiates an associated DNS cache resolver on demand using separate docker containers in conjunction with a firewall system operating on the cloud processing platform that uses the proxy server and the DNS cache resolver to provide firewall processing. ### Claim 7 (depends on 1) The system of claim 1 wherein the proxy server comprises an explicit proxy. ### Claim 8 (depends on 1) The system of claim 1 wherein the proxy server comprises an explicit proxy that is instantiated for the user. ### Claim 9 A method for processing data, comprising: configuring a first processor to operate one or more algorithms to provide a proxy server of a separate cloud computing instance for each of a plurality of external network communications segments that are each associated with a specific user and internal network communications segments that are each associated with the specific user; configuring the first processor to operate one or more algorithms to provide a firewall agent that performs firewall processing for each of the plurality of external network communications segments and the internal network communications segments; and installing the proxy server using a proxy auto configuration file that is associated with the firewall agent. ### Claim 10 (depends on 9) The method of claim 9 further comprising implementing the proxy server on a cloud processing platform that instantiates the proxy server on demand and associates it with one of the plurality of external network communications segments. ### Claim 11 (depends on 9) The method of claim 9 further comprising implementing the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand. ### Claim 12 (depends on 9) The method of claim 9 further comprising implementing the proxy server on a cloud processing platform that instantiates the proxy server on demand using a container logic structure. ### Claim 13 (depends on 9) The method of claim 9 further comprising implementing the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand using container logic structures. ### Claim 14 (depends on 9) The method of claim 9 further comprising implementing the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand in conjunction with a firewall system operating on the cloud processing platform. ### Claim 15 A system including a processor with associated data memory devices that are configured to store instructions that cause the processor to perform functions associated with the instructions, the instructions causing the processor to perform the functions of: provide a proxy server of a separate cloud computing instance for each of a plurality of external network communications segments and internal network communications segments associated with one of a corresponding plurality of specific users; provide a firewall agent that performs firewall processing for each of the plurality of external network communications segments and the internal network communications segments; and install the proxy server using a proxy auto configuration file that is associated with the firewall agent. ### Claim 16 (depends on 15) The system of claim 15 wherein the instructions cause the processor to implement the proxy server on a cloud processing platform that instantiates the proxy server on demand. ### Claim 17 (depends on 15) The system of claim 15 wherein the instructions cause the processor to implement the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand. ### Claim 18 (depends on 15) The system of claim 15 wherein the instructions cause the processor to implement the proxy server on a cloud processing platform that instantiates the proxy server on demand using a container logic structure selected from a plurality of container logic structures. ### Claim 19 (depends on 15) The system of claim 15 wherein the instructions cause the processor to implement the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand using container logic structures. ### Claim 20 (depends on 15) The system of claim 15 wherein the instructions cause the processor to implement the proxy server on a cloud processing platform that instantiates the proxy server and an associated DNS cache resolver on demand in conjunction with a firewall system operating on the cloud processing platform.