Controlling access to external networks by an air-gapped endpoint
AssigneeHysolate Ltd.
InventorsBoris FIGOVSKY, Tal ZAMIR, Oleg ZLOTNIK, Nir ADLER
Life of this patent
Estimating the term…
Abstract
A method and system for controlling access to external networks by an air-gapped endpoint is provided. The method includes providing, on the air-gapped endpoint, a plurality of isolated security zones by instantiating a plurality of corresponding virtual machines using a hypervisor; selecting one security zone of the plurality of isolated security zones; and tunneling a traffic from the selected security zone to a designated network location, wherein the tunneling is through a virtual private network (VPN).
Claims20
A method for controlling access to external networks by an air-gapped endpoint, comprising:
- providing, on the air-gapped endpoint, a plurality of isolated security zones by instantiating a plurality of corresponding virtual machines using a hypervisor;
- selecting one security zone of the plurality of isolated security zones;
- and
- tunneling a traffic from the selected security zone to a designated network location, wherein the tunneling is through a virtual private network (VPN).
A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for controlling access to external networks by an air-gapped endpoint, the process comprising:
- providing, on the air-gapped endpoint, a plurality of isolated security zones by instantiating a plurality of corresponding virtual machines using a hypervisor;
- selecting one security zone of the plurality of isolated security zones;
- and
- tunneling a traffic from the selected security zone to a designated network location, wherein the tunneling is through a virtual private network (VPN).
An air-gapped computing system, comprising:
- a network card interface;
- a processing circuitry;
- and
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- provide, on the air-gapped endpoint, a plurality of isolated security zones by instantiating a plurality of corresponding virtual machines using a hypervisor;
- select one security zone of the plurality of isolated security zones;
- and
- tunnel a traffic from the selected security zone to a designated network location, wherein the tunneling is through a virtual private network (VPN).
Dependencies are inferred from the claim text.