# US 2026/0100933 A1 · Wildcard based private application access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0100933 A1 - Document ID: US20260100933A1 - Status: Published application - Kind: A1 - Application number: 19/361,967 - Filed: 2025-10-17 - Published: 2026-04-09 - Earliest claimed: 2023-07-28 - Assignees: Palo Alto Networks, Inc. - Applicants: Palo Alto Networks, Inc. - Inventors: Jayant Jain; Harieasswar Lakshmidevi; Mingfei Peng; Brian Russell Kean; Srivatsan Rajagopal - Web page: https://patentgrep.com/patent/US20260100933A1 ## CPC - H04L 63/0263: {Rule management} - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 61/4511: using domain name system [DNS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Techniques for wildcard based private application access are disclosed. In some embodiments, a system, a process, and/or a computer program product for wildcard based private application access includes receiving a request for access to an application over a secure access service edge (SASE) network for a user associated with an enterprise; determining if the request for access to the application matches a wildcard (e.g., the wildcard can be configured by an administrator of the enterprise for matching a fully qualified domain name (FQDN) for the application); and automatically configuring access information (e.g., IP address, protocol, and destination port) for the application that matches the wildcard. ## Claims ### Claim 1 A system, comprising: a processor configured to: receive a request for access to an application over a secure access service edge (SASE) network for a user associated with an enterprise; determine if the request for access to the application matches a wildcard; select a data center that is executing the application based on a local region, a load balancing, and/or disaster recovery criteria; and automatically configure access information for the application that matches the wildcard and the selected data center; and a memory coupled to the processor and configured to provide the processor with instructions. ### Claim 2 (depends on 1) The system of claim 1, wherein the application is a private application executed in the data center associated with the enterprise. ### Claim 3 (depends on 1) The system of claim 1, wherein the wildcard is configured by an administrator of the enterprise for matching one or more fully qualified domain names (FQDNs) for the application. ### Claim 4 (depends on 1) The system of claim 1, wherein policy enforcement includes routing of traffic associated with the request using a mobile user gateway or a remote network gateway. ### Claim 5 (depends on 1) The system of claim 1, wherein policy enforcement includes routing of traffic associated with the request using a mobile user gateway or a remote network gateway, and wherein the mobile user gateway or the remote network gateway comprises an SD-WAN. ### Claim 6 (depends on 1) The system of claim 1, wherein policy enforcement includes traffic steering of traffic associated with the request using a mobile user gateway or a remote network gateway. ### Claim 7 (depends on 1) The system of claim 1, wherein policy enforcement includes traffic steering of traffic associated with the request using a mobile user gateway or a remote network gateway, and wherein the mobile user gateway or the remote network gateway comprises an SD-WAN. ### Claim 8 (depends on 1) The system of claim 1, wherein the processor is further configured to: perform application discovery using probing. ### Claim 9 (depends on 1) The system of claim 1, wherein the processor is further configured to: monitor flow session data of user access. ### Claim 10 (depends on 1) The system of claim 1, wherein the processor is further configured to: periodically update a local IP address associated with the application to a virtual IP (VIP) address mapping. ### Claim 11 (depends on 1) The system of claim 1, wherein the processor is further configured to: map the request to the application executing in a local regional data center. ### Claim 12 A method, comprising: receiving a request for access to an application over a secure access service edge (SASE) network for a user associated with an enterprise; determining if the request for access to the application matches a wildcard; selecting a data center that is executing the application based on a local region, a load balancing, and/or disaster recovery criteria; and automatically configuring access information for the application that matches the wildcard and the selected data center. ### Claim 13 (depends on 12) The method of claim 12, wherein the application is a private application executed in the data center associated with the enterprise. ### Claim 14 (depends on 12) The method of claim 12, wherein the wildcard is configured by an administrator of the enterprise for matching one or more fully qualified domain names (FQDNs) for the application. ### Claim 15 (depends on 12) The method of claim 12, wherein policy enforcement includes routing of traffic associated with the request using a mobile user gateway or a remote network gateway. ### Claim 16 (depends on 12) The method of claim 12, wherein policy enforcement includes routing of traffic associated with the request using a mobile user gateway or a remote network gateway, and wherein the mobile user gateway or the remote network gateway comprises an SD-WAN. ### Claim 17 (depends on 12) The method of claim 12, wherein policy enforcement includes traffic steering of traffic associated with the request using a mobile user gateway or a remote network gateway. ### Claim 18 (depends on 12) The method of claim 12, wherein policy enforcement includes traffic steering of traffic associated with the request using a mobile user gateway or a remote network gateway, and wherein the mobile user gateway or the remote network gateway comprises an SD-WAN. ### Claim 19 (depends on 12) The method of claim 12, further comprising: performing application discovery using probing. ### Claim 20 A system, comprising: a processor configured to: receive a request for access to an application over a secure access service edge (SASE) network for a user associated with an enterprise; means for determining if the request for access to the application matches a wildcard; means for selecting a data center that is executing the application based on a local region, a load balancing, and/or disaster recovery criteria; and means for automatically configuring access information for the application that matches the wildcard and the selected data center; and a memory coupled to the processor and configured to provide the processor with instructions.