Triggering provisioning of cloud-based security through firewall

A system for triggering provisioning of cloud-based security through a network firewall, the system comprising:

• a firewall connector coupled with the network firewall;
• and
• a centralized management platform, wherein an access control service is a cloud-based service of the centralized management platform, and wherein the access control service performs a method comprising:
• receiving a request by an end-user device to access a private network via the firewall connector coupled with a network firewall;
• verifying authorization of the end-user device to access the private network;
• evaluating device characteristics of the end-user device;
• applying configured application control policies based on the device characteristics;
• evaluating Zero Trust Network Access (ZTNA) policies based on the device characteristics and application configured application control policies;
• generating a unique session token when the request is approved;
• providing the unique session token to the firewall connector;
• and
• forming a connector tunnel that establishes a secure connection between the end-user device and the private network;
• calling, by a license manager, the access control service;
• requesting, by the access control service, the centralized management platform to issue an org admin-scoped Application Programming Interface (API) key to the license manager;
• providing, by the centralized management platform, the org admin-scoped API key to the access control service;
• providing, by the access control service, the org admin-scoped API key to the license manager;
• using, by the license manager, the org admin-scoped API key to provision a connector-scoped API key in the centralized management platform;
• creating, in the centralized management platform, the connector-scoped API key based on connector specifications that ties the firewall connector to the connector-scoped API key;
• and
• providing the connector-scoped API key to the license manager.

A non-transitory computer readable storage medium having embodied thereon a program executable by a processor for implementing a method for triggering provisioning of cloud-based security through firewall, the method comprising:

• receiving a request by an end-user device to access a private network via a firewall connector coupled with a network firewall;
• verifying authorization of the end-user device to access the private network;
• evaluating device characteristics of the end-user device;
• applying configured application control policies based on the device characteristics;
• evaluating Zero Trust Network Access (ZTNA) policies based on the device characteristics and application configured application control policies;
• generating a unique session token when the request is approved;
• providing the unique session token to the firewall connector;
• and
• forming a connector tunnel that establishes a secure connection between the end-user device and the private network;
• calling, by a license manager, an access control service;
• requesting, by the access control service, a centralized management platform to issue an org admin-scoped Application Programming Interface (API) key to the license manager;
• providing, by the centralized management platform, the org admin-scoped API key to the access control service;
• providing, by the access control service, the org admin-scoped API key to the license manager;
• using, by the license manager, the org admin-scoped API key to provision a connector-scoped API key in the centralized management platform;
• creating, in the centralized management platform, the connector-scoped API key based on connector specifications that ties the firewall connector to the connector-scoped API key;
• and
• providing the connector-scoped API key to the license manager.