John Devasia

US Patent:

20210152604, May 20, 2021

Filed:

Nov 3, 2020

Appl. No.:

17/087816

Inventors:

- Cambridge MA, US
Michael Graham - Weymouth MA, US
John Devasia - Coppell TX, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
G06F 21/55
H04L 12/66
H04L 29/12
H04L 29/08

Abstract:

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.

US Patent:

20200053129, Feb 13, 2020

Filed:

Aug 13, 2018

Appl. No.:

16/101785

Inventors:

- Cambridge MA, US
Michael Graham - Weymouth MA, US
John Devasia - Coppell TX, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
G06F 21/55
H04L 29/08
H04L 29/12
H04L 12/66

Abstract:

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.