Optimize compliance evaluation of endpoints
AssigneePulse Secure, LLC
InventorsBandam Radha Shravan, Robert Koeten, Biju Kaimal
Life of this patent
Estimating the term…
Abstract
The techniques described herein relate to authorizing networked devices to access protected network zones and/or network resources in a private network. In response to a first access request, a network appliance requests full compliance information from the networked device. The received compliance information is stored in a database. Subsequently, when the compliance information on the networked device changes, the network device sends updated compliance information to the network appliance. The network appliance reevaluates the compliance state of the networked device based on the updated compliance information and the compliance information stored in the database.
Claims20
A method comprising:
- in response to receiving, by a network appliance, a first request to access a protected network resource from an endpoint device that includes a client software module configured to communicate with the network appliance:
- determining which compliance information related to policies associated with a role assigned to the endpoint device to request;
- requesting all of the determined compliance information from the client software module;
- evaluating the compliance of the endpoint device based on the compliance information received from the client software module to determine a compliance state and providing access based on the compliance state;
- storing the received compliance information in a database associated with the network appliance;
- and
- in response to receiving, by the network appliance, first updated compliance information that includes only updated ones of the compliance information required by the policies, evaluating the compliance of the endpoint device based on the updated compliance information and the compliance information stored in the database to determine an updated compliance state and providing access based on the updated compliance state.
A network appliance that enforces one or more policies for accessing a private network, the network appliance comprising at least one processor configured to:
- in response to receiving a first request to access the protected network resource from an endpoint device that includes a client software module configured to communicate with the network appliance:
- determine, using a policy database, which compliance information related to policies associated with a role assigned to the endpoint device to request;
- request all of the determined compliance information from the client software module;
- evaluate the compliance of the endpoint device based on the compliance information received from the client software module to determine a compliance state and provide access based on the compliance state;
- storing the received compliance information in a database associated with the network appliance;
- and
- in response to receiving, by the network appliance, first updated compliance information that includes only updated ones of the compliance information required by the policies, evaluate the compliance of the endpoint device based on the updated compliance information and the compliance information stored in the database to determine an updated compliance state and provide access based on the updated compliance state.
A method comprising:
- in response to receiving, by a network appliance, a request to access a protected network resource from an endpoint device that includes a client software module configured to communicate with the network appliance:
- determining whether a compliance database includes compliance information associated with the endpoint device;
- when compliance database does not include the compliance information associated with the endpoint device, determining which of the compliance information related to policies associated with the protected network resource to request and requesting all of the determined compliance information from the client software module;
- when compliance database includes the compliance information associated with the endpoint device, accessing the compliance information of the endpoint device stored in the database and requesting an update from the endpoint device;
- and
- evaluating the compliance of the endpoint device based on the compliance information to determine a compliance state and providing access based on the compliance state.
Dependencies are inferred from the claim text.