Dynamic security policy generation and recommendation for sim-based clientless sase

A dynamic security method for securing a plurality of cellular devices across a cellular network in a cloud-based environment, the dynamic security method comprises:

• transmitting traffic from a cellular device of the plurality of cellular devices at the cellular network via a tunnel;
• identifying traffic associated with a plurality of network identifiers;
• routing traffic towards a gateway of a plurality of gateways in the cloud-based environment;
• and
• analyzing traffic at the tunnel and generating a plurality of policies and a plurality of recommendations or remediation actions to remediate a threat via a threat management module, the threat management module is operable to:
• intercept traffic within the tunnel at an application layer of the cloud-based environment;
• create a plurality of policy profiles for a plurality of tenants at the cellular network;
• monitor a threat landscape of the cellular network and relating the threat with the plurality of policy profiles;
• store a plurality of tenant profiles, a plurality of threat information, and the plurality of policy profiles;
• and
• based on the plurality of tenant profiles, the plurality of policy profiles, geo-location of the cellular device, and historical data of the plurality of policies, generate the plurality of recommendations or remediation actions and provide the plurality of recommendations or remediation actions at the cellular device to remediate the threat, wherein the plurality of recommendations or remediation actions are provided as options in a prioritized sequence, with top options being emphasized for user selection.

A non-transitory computer-readable storage medium having computer-executable instructions embodied thereon that, when executed by one or more processors, facilitate a dynamic security method for securing a plurality of cellular devices across a cellular network in a cloud-based environment, the non-transitory computer-readable storage medium comprises:

• transmitting traffic from a cellular device of the plurality of cellular devices at the cellular network via a tunnel;
• identifying traffic associated with a plurality of network identifiers;
• routing traffic towards a gateway of a plurality of gateways in the cloud-based environment;
• and
• analyzing traffic at the tunnel and generating a plurality of policies and a plurality of recommendations or remediation actions to remediate a threat via a threat management module, the threat management module is operable to:
• intercept traffic within the tunnel at an application layer of the cloud-based environment;
• create a plurality of policy profiles for a plurality of tenants at the cellular network;
• monitor a threat landscape of the cellular network and relating the threat with the plurality of policy profiles;
• store a plurality of tenant profiles, a plurality of threat information, and the plurality of policy profiles;
• and
• based on the plurality of tenant profiles, the plurality of policy profiles, geo-location of the cellular device, and historical data of the plurality of policies, generate the plurality of recommendations or remediation actions and provide the plurality of recommendations or remediation actions at the cellular device to remediate the threat, wherein the plurality of recommendations or remediation actions are provided as options in a prioritized sequence, with top options of the prioritized sequence being emphasized for user selection.