Intercept-based multifactor authentication enrollment of clients as a network service
AssigneePalo Alto Networks, Inc.
InventorAshwath Sreenivasa Murthy
Life of this patent
Estimating the term…
Abstract
Techniques for intercept-based multifactor authentication client enrollment as a network service are disclosed. In some embodiments, a system, process, and/or computer program product for intercept-based multifactor authentication client enrollment as a network service includes monitoring a session at a firewall, intercepting a request for access to a resource while monitoring the session at the firewall, determining that a user associated with the session is not enrolled for multifactor authentication, and initiating enrollment of the user for the multifactor authentication.
Claims20
A system, comprising:
- a processor configured to:
- monitor a session at a firewall;
- intercept a request for access to a resource while monitoring the session at the firewall;
- determine that a user associated with the session is not enrolled for multifactor authentication;
- initiate enrollment of the user for the multifactor authentication;
- and
- block access to the resource prior to completing the enrollment of the user for the multifactor authentication if a predetermined period of time has expired;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring a session at a firewall;
- intercepting a request for access to a resource while monitoring the session at the firewall;
- determining that a user associated with the session is not enrolled for multifactor authentication;
- initiating enrollment of the user for the multifactor authentication;
- and
- blocking access to the resource prior to completing the enrollment of the user for the multifactor authentication if a predetermined period of time has expired.
A computer program product, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:
- monitoring a session at a firewall;
- intercepting a request for access to a resource while monitoring the session at the firewall;
- determining that a user associated with the session is not enrolled for multifactor authentication;
- initiating enrollment of the user for the multifactor authentication;
- and
- blocking access to the resource prior to completing the enrollment of the user for the multifactor authentication if a predetermined period of time has expired.
Dependencies are inferred from the claim text.