Network Session Management Based on Contextual Information
AssigneeCisco Technology, Inc.
InventorPok Sze Wong
Life of this patent
Estimating the term…
Abstract
An access control module in an enterprise computing network receives contextual information of a first active network session at a first network endpoint and contextual information of a second active network session at a second network endpoint. The access control module is configured to evaluate the contextual information of one or more of the first or second network sessions based on one or more network policies to determine a policy action for enforcement on at least one of the first or second network endpoints.
Claims28
A method comprising:
- receiving contextual information of a first active network session of a user supported by a first network endpoint in an enterprise computing network;
- receiving contextual information of a second active network session of the user supported by a second network endpoint in the enterprise computing network;
- and
- evaluating the contextual information of one or more of the first or second active network sessions based on one or more network policies to determine a policy action for enforcement.
An apparatus comprising:
- a plurality of network interface ports configured for communication with one or more network devices of an enterprise computing network;
- a memory comprising access control logic;
- and
- a processor configured to:
- receive, via one of the network interface ports, contextual information of a first active network session of a user supported by a first network endpoint via one of the network interface ports;
- receive, via one of the network interface ports, contextual information of a second active network session of the user supported by a second network endpoint;
- and
- evaluate the contextual information of one or more of the first or second active network sessions based on one or more network policies to determine a policy action for enforcement.
One or more computer readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to:
- at an access control module of an enterprise computing network, receive contextual information of a first active network session of a user supported by a first network endpoint;
- receive contextual information of a second active network session of the user supported by a second network endpoint;
- and
- evaluate the contextual information of one or more of the first or second active network sessions based on one or more network policies to determine a policy action for enforcement on at least one of the first or second network endpoints.
Dependencies are inferred from the claim text.