John S Devasia

US Patent:

20210152604, May 20, 2021

Filed:

Nov 3, 2020

Appl. No.:

17/087816

Inventors:

- Cambridge MA, US
Michael Graham - Weymouth MA, US
John Devasia - Coppell TX, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
G06F 21/55
H04L 12/66
H04L 29/12
H04L 29/08

Abstract:

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.

US Patent:

20200186500, Jun 11, 2020

Filed:

Dec 6, 2018

Appl. No.:

16/211372

Inventors:

- Cambridge MA, US
John Devasia - Coppell TX, US
Christopher Dewar - Edinburgh, Scotland, GB
Eyal Heiman - Tel Aviv, IL

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/08
H04L 29/12

Abstract:

Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

US Patent:

20200186501, Jun 11, 2020

Filed:

Dec 6, 2018

Appl. No.:

16/211383

Inventors:

- Cambridge MA, US
John Devasia - Coppell TX, US
Christopher Dewar - Edinburgh, GB
Eyal Heiman - Tel Aviv, IL

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/08

Abstract:

Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

US Patent:

20200053129, Feb 13, 2020

Filed:

Aug 13, 2018

Appl. No.:

16/101785

Inventors:

- Cambridge MA, US
Michael Graham - Weymouth MA, US
John Devasia - Coppell TX, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
G06F 21/55
H04L 29/08
H04L 29/12
H04L 12/66

Abstract:

Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.