System and method for managing access for trusted and untrusted applications
AssigneeCisco Technology, Inc.
InventorsPhilip J.S. Gladstone, Morris J. Katz
Life of this patent
Estimating the term…
Abstract
A method is provided in one example embodiment and includes identifying a network location of an endpoint, which is attempting to initiate an application; identifying whether the endpoint is operating in an enterprise environment; determining whether the application is trusted based on metadata associated with the application; and provisioning a tunnel for data traffic associated with the application. In more detailed implementations, the tunnel can be provisioned if the application is trusted and the endpoint is outside of an enterprise environment. In addition, the tunnel can be provisioned if the application is untrusted and the endpoint is within an enterprise environment.
Claims21
A method, comprising:
- identifying a network location of an endpoint, which is attempting to initiate an application;
- identifying whether the endpoint is operating in an enterprise environment;
- determining whether the application is trusted based on metadata associated with the application;
- and
- provisioning a tunnel for data traffic associated with the application.
Logic encoded in one or more non-transitory media that includes code for execution and when executed by a processor operable to perform operations comprising:
- identifying a network location of an endpoint, which is attempting to initiate an application;
- identifying whether the endpoint is operating in an enterprise environment;
- determining whether the application is trusted based on metadata associated with the application;
- and
- provisioning a tunnel for data traffic associated with the application.
An apparatus, comprising:
- a memory element configured to store code;
- a processor operable to execute instructions associated with the code;
- and
- a policy module coupled to the memory element and the processor, wherein the apparatus is configured for:
- identifying an attempt to initiate an application;
- identifying whether the endpoint is operating in an enterprise environment;
- determining whether the application is trusted based on metadata associated with the application;
- and
- provisioning a tunnel for data traffic associated with the application.
An apparatus, comprising:
- a memory element configured to store code;
- a processor operable to execute instructions associated with the code;
- and
- a policy module coupled to the memory element and the processor, wherein the apparatus is configured for:
- download a list of application hashes, which are stored with metadata and used to identify whether an application is trusted;
- communicating a remote query in order to receive a policy designating routing for data traffic associated with the application;
- and
- provisioning a tunnel for the data traffic associated with the application.
Dependencies are inferred from the claim text.