Method and systems for routing packets from an endpoint to a gateway
AssigneeCitrix Systems, Inc.
InventorsGoutham P. Rao, Robert A. Rodriguez, Eric R. Brueggemann
Life of this patent
Estimating the term…
Abstract
A method for routing packets from an endpoint to a gateway includes the step of receiving a filtering table. An outbound packet is intercepted. The outbound packet is transmitted to a client application, responsive to the filtering table. The client application transmits the outbound packet to a gateway responsive to an application of a policy to the outbound packet.
Claims27
A method for routing packets from an endpoint to a gateway, the method comprising:
- (a) receiving, by a driver of a process for providing secure communications to a gateway from an endpoint, a filtering table;
- (b) intercepting, by the driver, an outbound packet, the driver terminating a first transport layer connection with an application of the endpoint;
- (c) transmitting, by the driver, the outbound packet to a client application, responsive to the filtering table, the client application providing a second transport layer connection from the endpoint to the gateway;
- and
- (d) transmitting, by the client application, the outbound packet to the gateway responsive to an application of a policy to the outbound packet.
A device for routing packets to a gateway, the device comprising:
- a filter of a process for providing secure communications to a gateway, intercepting an outbound packet and transmitting the outbound packet, responsive to a filter table, the filter terminating a first transport layer connection of an application;
- and
- a client application, in communication with the filter, receiving the outbound packet, the client application providing a second transport layer connection to the gateway and determining to transmit the outbound packet to the gateway, responsive to applying a policy to the outbound packet.
A system for routing packets to a gateway, the system comprising:
- a computer system providing a gateway, comprising a kernel and an application space, receiving at least one outbound packet;
- and
- a device, in communication with the computer system, comprising:
- a filter of a process for providing secure communications to a gateway from the device, intercepting an outbound packet and transmitting the outbound packet, responsive to a filter table, the filter terminating a first transport layer connection of an application;
- and
- a client application, in communication with the filter, receiving the outbound packet, the client application providing a second transport layer connection to the gateway and determining to transmit the outbound packet to the gateway, responsive to applying a policy to the outbound packet.
Dependencies are inferred from the claim text.