Dynamic policy generation for clientless sase using contextual enhanced policy profiles

A dynamic security system to secure a plurality of cellular devices across a cellular network in a cloud-based environment, the dynamic security system comprises:

• a tenant of a plurality of tenants using a plurality of cellular networks, the tenant includes the plurality of cellular devices;
• a tunnel between a cellular device of the plurality of cellular devices and the cellular network, the tunnel is operable to:
• transmit traffic from the cellular device of the plurality of cellular devices at the cellular network;
• and
• identify traffic associated with a plurality of network identifiers;
• a traffic steering module to route traffic towards a gateway of a plurality of gateways in the cloud-based environment;
• and
• a threat management module to analyze traffic at the tunnel and to generate a plurality of policies and a plurality of recommendations or remediation actions to remediate a threat, the threat management module is operable to:
• intercept traffic within the tunnel at an application layer of the cloud-based environment;
• create a plurality of policy profiles for the plurality of tenants at the cellular network, wherein the plurality of policy profiles is created based on:
• history of policies configured at an enterprise,
• continuously updated policy templates for different features comprising data loss prevention (DLP), presence of threat or malware, file constraints, category-based policies, destination of a file or application, and
• user-based policies, device properties, and geolocation-based properties associated with the cellular device or the tenant;
• monitor a threat landscape of the cellular network and correlate the threat with the plurality of policy profiles;
• store a plurality of tenant profiles, a plurality of threat information, and the plurality of policy profiles;
• and
• based on the plurality of tenant profiles, the plurality of policy profiles, geo-location of the cellular device, and historical data of the plurality of policies, generate the plurality of recommendations or remediation actions and provide the plurality of recommendations or remediation actions at the cellular device to remediate the threat, wherein the plurality of recommendations or remediation actions are provided as options in a prioritized sequence, with top options being emphasized for user selection.

A dynamic security method for securing a plurality of cellular devices across a cellular network in a cloud-based environment, the dynamic security method comprises:

• transmitting traffic from a cellular device of the plurality of cellular devices at the cellular network via a tunnel;
• identifying traffic associated with a plurality of network identifiers;
• routing traffic towards a gateway of a plurality of gateways in the cloud-based environment;
• and
• analyzing traffic at the tunnel and generating a plurality of policies and a plurality of recommendations or remediation actions to remediate a threat via a threat management module, the threat management module is operable to:
• intercept traffic within the tunnel at an application layer of the cloud-based environment;
• create a plurality of policy profiles for a plurality of tenants at the cellular network, wherein the plurality of policy profiles is created based on:
• history of policies configured at an enterprise,
• continuously updated policy templates for different features comprising data loss prevention (DLP), presence of threat or malware, file constraints, category-based policies, destination of a file or application, and
• user-based policies, device properties, and geolocation-based properties associated with the cellular device or a tenant;
• monitor a threat landscape of the cellular network and correlate the threat with the plurality of policy profiles;
• store a plurality of tenant profiles, a plurality of threat information, and the plurality of policy profiles;
• and
• based on the plurality of tenant profiles, the plurality of policy profiles, geo-location of the cellular device, and historical data of the plurality of policies, generate the plurality of recommendations or remediation actions and provide the plurality of recommendations or remediation actions at the cellular device to remediate the threat, wherein the plurality of recommendations or remediation actions are provided as options in a prioritized sequence, with top options being emphasized for user selection.

A non-transitory computer-readable storage medium having computer-executable instructions embodied thereon that, when executed by one or more processors, facilitate a dynamic security method for securing a plurality of cellular devices across a cellular network in a cloud-based environment, the non-transitory computer-readable storage medium comprises:

• transmitting traffic from a cellular device of the plurality of cellular devices at the cellular network via a tunnel;
• identifying traffic associated with a plurality of network identifiers;
• routing traffic towards a gateway of a plurality of gateways in the cloud-based environment;
• and
• analyzing traffic at the tunnel and generating a plurality of policies and a plurality of recommendations or remediation actions to remediate a threat via a threat management module, the threat management module is operable to:
• intercept traffic within the tunnel at an application layer of the cloud-based environment;
• create a plurality of policy profiles for a plurality of tenants at the cellular network, wherein the plurality of policy profiles is created based on:
• history of policies configured at an enterprise,
• continuously updated policy templates for different features comprising data loss prevention (DLP), presence of threat or malware, file constraints, category-based policies, destination of a file or application, and
• user-based policies, device properties, and geolocation-based properties associated with the cellular device or a tenant;
• monitor a threat landscape of the cellular network and correlate the threat with the plurality of policy profiles;
• store a plurality of tenant profiles, a plurality of threat information, and the plurality of policy profiles;
• and
• based on the plurality of tenant profiles, the plurality of policy profiles, geo-location of the cellular device, and historical data of the plurality of policies, generate the plurality of recommendations or remediation actions and provide the plurality of recommendations or remediation actions at the cellular device to remediate the threat, wherein the plurality of recommendations or remediation actions are provided as options in a prioritized sequence, with top options being emphasized for user selection.