Cloud security distributed architecture
AssigneeNetskope, Inc.
InventorsKrishna Narayanaswamy, Lebin Cheng, Ravi Ithal, Sanjay Beri
Life of this patent
Estimating the term…
Abstract
The technology disclosed relates to accessing a hosted service on a client device. In particular, the technology disclosed relates to receiving, on a client device of an entity's user, from a network security system, a forwarding rule for modifying requests for accessing a hosted service, receiving on the client device a request for accessing the hosted service, using the forwarding rule to modify the request for accessing the hosted service and generating a modified request for accessing the hosted service, and receiving on the client device a response from the network security system.
Claims19
A network security system, comprising:
- a data plane configured to intermediate communications between client devices and hosted services, wherein:
- the data plane is hosted across two or more data plane points of presence,
- the data plane points of presence are geographically distributed, and
- each of the data plane points of presence independently implements data plane intermediary functionality, comprising:
- intercepting communications between the client devices and the hosted services;
- and
- applying security policies to the intercepted communications;
- and
- a management plane configured to provide management services of the network security system, wherein:
- the management plane is hosted across one or more management plane points of presence, wherein at least one of the two or more data plane points of presence is separately hosted from the one or more management plane points of presence, and
- the management services comprise:
- providing configuration and the security policies to the data plane;
- and
- monitoring a status of the data plane points of presence.
Dependencies are inferred from the claim text.