Secure access service edge for mobile networks
AssigneePalo Alto Networks, Inc.
InventorsYogesh Vijay Ranade, Madhusudan Nanjanagud, Swaminathan Anantha
Life of this patent
Estimating the term…
Abstract
Techniques for providing security for providing Secure Access Service Edge (SASE) for mobile networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for providing SASE for mobile networks in accordance with some embodiments includes receiving traffic associated with a User Equipment (UE) from a mobile core network at a SASE cloud network; enforcing a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic; and forwarding the secured data plane traffic from the SASE cloud network to its original destination.
Claims20
A system, comprising:
- a processor configured to:
- receive traffic associated with a User Equipment (UE) from a mobile core network at a Secure Access Service Edge (SASE) cloud network;
- enforce a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic;
- and
- forward the secured data plane traffic from the SASE cloud network to its original destination;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- receiving traffic associated with a User Equipment (UE) from a mobile core network at a Secure Access Service Edge (SASE) cloud network;
- enforcing a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic;
- and
- forwarding the secured data plane traffic from the SASE cloud network to its original destination.
A computer program product, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:
- receiving traffic associated with a User Equipment (UE) from a mobile core network at a Secure Access Service Edge (SASE) cloud network;
- enforcing a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic;
- and
- forwarding the secured data plane traffic from the SASE cloud network to its original destination.
Dependencies are inferred from the claim text.