Systems and methods for using a network access device to secure a network prior to requesting access to the network by the network access device
AssigneeFortinet, Inc.
InventorEmilio Borbolla Galindo
Life of this patent
Estimating the term…
Abstract
Various approaches for securing networks against access from off network devices. In some cases, embodiments discussed relate to systems and methods for identifying potential threats included in a remote network by a network access device prior to requesting access to a known secure network via the remote network.
Claims21
A non-transitory computer-readable storage medium embodying instructions, which when executed by one or more processing resources of a secure corporate access device, representing a known access device to a corporate network, causes the secure corporate access device to:
- receive a request to access the corporate network, representing a known network to the secure corporate access device;
- based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identify whether the remote network includes one or more unsecure network elements by scanning the remote network;
- based on an unsecure network element being identified on the remote network as a result of the scanning;
- deny the request to access the corporate network;
- and
- mitigate a security issue of the unsecure network element by coupling the secure corporate access device in communication with the corporate network through another remote network;
- and
- based on no unsecure network elements being identified on the remote network as a result of the scanning, request a grant of access from the corporate network to the secure corporate access device.
A method comprising:
- receiving, by secure corporate access device, representing a known access device to a corporate network, a request to access the corporate network, representing a known network to the secure corporate access device;
- based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identifying, by the secure corporate access device, whether the remote network includes one or more unsecure network elements by scanning the remote network;
- based on an unsecure network element being identified on the remote network as a result of the scanning;
- denying the request to access the corporate network;
- and
- mitigating a security issue of the unsecure network elements by coupling the secure corporate access device in communication with the corporate network through another remote network;
- and
- based on no unsecure network elements being identified on the remote network as a result of the scanning, requesting, by the secure corporate access device, a grant of access from the corporate network to the secure corporate access device.
A secure corporate access device comprising:
- one or more processing resources;
- a non-transitory computer-readable medium coupled to the one or more processing resources and having stored therein instructions that when executed by the one or more processing resources cause the secure corporate access device to:
- receive a request to access the corporate network, representing a known network to the secure corporate access device;
- based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identify whether the remote network includes one or more unsecure network elements by scanning the remote network;
- based on an unsecure network element being identified on the remote network as a result of the scanning;
- deny the request to access the corporate network;
- and
- mitigate a security issue of the unsecure network element by coupling the secure corporate access device in communication with the corporate network through another remote network;
- and
- based on no unsecure network elements being identified on the remote network as a result of the scanning, request a grant of access from the corporate network to the secure corporate access device.
Dependencies are inferred from the claim text.