# US 2025/0158985 A1 · Automated satellite device authentication to a portal for secure remote access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0158985 A1 - Document ID: US20250158985A1 - Status: Published application - Kind: A1 - Application number: 18/389,540 - Filed: 2023-11-14 - Published: 2025-05-15 - Earliest claimed: 2023-11-14 - Assignees: Palo Alto Networks, Inc. - Applicants: Palo Alto Networks, Inc. - Inventors: Madhusudhan Gopalappa; Tengda Shi; Xin Yao; Xun Zhou - Web page: https://patentgrep.com/patent/US20250158985A1 ## CPC - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0272: {Virtual private networks} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Techniques for automated satellite device authentication to a portal for secure remote access are disclosed. In some embodiments, a system, a process, and/or a computer program product for automated satellite device authentication to a portal for secure remote access include receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite. ## Claims ### Claim 1 A system comprising: a processor configured to: receive, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; receive, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and authenticate the new satellite at the portal using the serial number and the IP address associated with the new satellite; and a memory coupled to the processor and configured to provide the processor with instructions. ### Claim 2 (depends on 1) The system of claim 1, wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. ### Claim 3 (depends on 1) The system of claim 1, wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. ### Claim 4 (depends on 1) The system of claim 1, wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal. ### Claim 5 (depends on 1) The system of claim 1, further comprising: sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite. ### Claim 6 (depends on 1) The system of claim 1, further comprising: performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt. ### Claim 7 (depends on 1) The system of claim 1, further comprising: performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time. ### Claim 8 (depends on 1) The system of claim 1, further comprising: sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment. ### Claim 9 A method comprising: receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite. ### Claim 10 (depends on 9) The method of claim 9, wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. ### Claim 11 (depends on 9) The method of claim 9, wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. ### Claim 12 (depends on 9) The method of claim 9, wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal. ### Claim 13 (depends on 9) The method of claim 9, further comprising: sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite. ### Claim 14 (depends on 9) The method of claim 9, further comprising: performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt. ### Claim 15 (depends on 9) The method of claim 9, further comprising: performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time. ### Claim 16 (depends on 9) The method of claim 9, further comprising: sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment. ### Claim 17 A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for: receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite. ### Claim 18 (depends on 17) The computer program product of claim 17, wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. ### Claim 19 (depends on 17) The computer program product of claim 17, wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. ### Claim 20 (depends on 17) The computer program product of claim 17, wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal.