Back to results
US 2024/0205189 A1Published application
Systems and methods for internal secure network resolution
AssigneeFortinet, Inc.
InventorsWeining Wu, Kunal Marwah, Jinhai Yang, Xu Zheng
Life of this patent
Estimating the term…
Abstract
Systems, devices, and methods are discussed for limiting exposure of internal network operations beyond the boundary of a secure network.
Claims20
A method comprising:
- intercepting, by an endpoint security application of an endpoint device associated with a secured network, a request to access a particular network resource within the secured network, wherein the request for the particular network resource includes a domain name corresponding to the particular network resource;
- accessing, by the endpoint security application, an internal list of domain names maintained within the secure network, wherein the internal list of domain names includes a plurality of domain names each identifying a given network resource of a plurality of network resources accessible on the secured network and corresponding to an internet protocol (IP) address of the given network resource;
- based at least in part on determining that the particular network resource is included in the internal list of domain names, limiting exposure of internal network operations of the secured network, by locally resolving, by the endpoint security application, the IP address of the particular network resource with reference to the internal list of domain names;
- and
- returning, by the endpoint security application, a response to the request including the IP address in a form that appears to the endpoint device to be from a domain name system (DNS).
2 more elements
A system comprising:
- one or more processing resources;
- a non-transitory computer-readable medium, coupled to the one or more processing resources, having stored therein instructions that when executed by the one or more processing resources cause the system to:
- intercept a request to access a particular network resource within a secured network, wherein the request for the particular network resource includes a domain name corresponding to the particular network resource;
- access an internal list of domain names maintained within the secure network, wherein the internal list of domain names includes a plurality of domain names each identifying a given network resource of a plurality of network resources accessible on the secured network and corresponding to an internet protocol (IP) address of the given network resource;
- based at least in part on a determination that the particular network resource is included in the internal list of domain names, limit exposure of internal network operations of the secured network, by locally resolving the IP address of the particular network resource with reference to the internal list of domain names;
- and
- return a response to the request including the IP address in a form that appears to be from a domain name system (DNS).
4 more elements
A non-transitory computer-readable storage medium embodying instructions, which when executed by one or more processing resources of an endpoint device associated with a secured network, cause an endpoint security application of the endpoint device to:
- intercept a request by to access a particular network resource within the secured network, wherein the request for the particular network resource includes a domain name corresponding to the particular network resource;
- access an internal list of domain names maintained within the secure network, wherein the internal list of domain names includes a plurality of domain names each identifying a given network resource of a plurality of network resources accessible on the secured network and corresponding to an internet protocol (IP) address of the given network resource;
- based at least in part on a determination that the particular network resource is included in the internal list of domain names, limit exposure of internal network operations of the secured network, by locally resolving the IP address of the particular network resource with reference to the internal list of domain names;
- and
- return a response to the request including the IP address in a form that appears to the endpoint device to be from a domain name system (DNS).
2 more elements
Dependencies are inferred from the claim text.