Network services platform
First Claim
1. A computer-implemented method of using a services platform to provide a network service to a remote enterprise network, comprising:
- establishing an Internet Protocol (IP) tunnel between the services platform and an endpoint of the remote enterprise network;
establishing a bridge between the IP tunnel and the remote enterprise network, wherein establishing the bridge comprises using packet injection to inject packets to the remote enterprise network, the packets injected to the remote enterprise network appearing to originate from the endpoint, the bridge being further configured to transfer packets from the remote enterprise network received by the endpoint through the IP tunnel;
translating IP addresses in network traffic received by the services platform from the remote enterprise network via the IP tunnel from enterprise network IP addresses to corresponding service platform IP addresses;
translating IP addresses in network traffic from the services platform to the remote enterprise network via the IP tunnel from services platform IP addresses to corresponding enterprise network IP addresses; and
providing the network service to the remote enterprise network via the IP tunnel and bridge;
wherein the providing the network service to the remote enterprise network comprises providing one or more of the following network services;
vulnerability management, configuration auditing, file integrity monitoring, or compliance auditing.
4 Assignments
0 Petitions
Accused Products
Abstract
A network services platform provides services to remote enterprise networks. The services platform provides a control module to a computer in the enterprise network. The control module executes on the computer and interacts with the services platform to establish an Internet Protocol (IP) tunnel between the services platform and the computer. The control module also establishes a bridge between the IP tunnel and the enterprise network. The services platform allocates a unique private IP address space to the enterprise network, and translates IP addresses in network communications between enterprise network addresses and corresponding services platform addresses in the allocated unique private address space. The services platform provides network services to the enterprise network via the IP tunnel and bridge.
-
Citations
15 Claims
-
1. A computer-implemented method of using a services platform to provide a network service to a remote enterprise network, comprising:
-
establishing an Internet Protocol (IP) tunnel between the services platform and an endpoint of the remote enterprise network; establishing a bridge between the IP tunnel and the remote enterprise network, wherein establishing the bridge comprises using packet injection to inject packets to the remote enterprise network, the packets injected to the remote enterprise network appearing to originate from the endpoint, the bridge being further configured to transfer packets from the remote enterprise network received by the endpoint through the IP tunnel; translating IP addresses in network traffic received by the services platform from the remote enterprise network via the IP tunnel from enterprise network IP addresses to corresponding service platform IP addresses; translating IP addresses in network traffic from the services platform to the remote enterprise network via the IP tunnel from services platform IP addresses to corresponding enterprise network IP addresses; and providing the network service to the remote enterprise network via the IP tunnel and bridge; wherein the providing the network service to the remote enterprise network comprises providing one or more of the following network services;
vulnerability management, configuration auditing, file integrity monitoring, or compliance auditing. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A non-transitory computer-readable storage medium storing computer-executable instructions which when executed by a computer cause the computer to perform a method of using a services platform to provide a network service to a remote enterprise network, the method comprising:
-
establishing an Internet Protocol (IP) tunnel between the services platform and an endpoint of the remote enterprise network; establishing a bridge between the IP tunnel and the remote enterprise network, wherein establishing the bridge comprises using packet injection to inject packets to the remote enterprise network, the packets injected to the remote enterprise network appearing to originate from the endpoint, the bridge being further configured to transfer packets from the remote enterprise network received by the endpoint through the IP tunnel; translating IP addresses in network traffic received by the services platform from the remote enterprise network via the IP tunnel from enterprise network IP addresses to corresponding service platform IP addresses; translating IP addresses in network traffic from the services platform to the remote enterprise network via the IP tunnel from services platform IP addresses to corresponding enterprise network IP addresses; and providing the network service to the remote enterprise network via the IP tunnel and bridge; wherein the providing the network service to the remote enterprise network comprises providing one or more of the following network services;
vulnerability management, configuration auditing, file integrity monitoring, or compliance auditing. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A system, comprising:
-
a processor; memory storing computer-executable instructions which when executed by the processor cause the processor to perform a method of using a services platform to provide a network service to a remote enterprise network, the method comprising; establishing an Internet Protocol (IP) tunnel between the services platform and an endpoint of the remote enterprise network; establishing a bridge between the IP tunnel and the remote enterprise network, wherein establishing the bridge comprises using packet injection to inject packets to the remote enterprise network, the packets injected to the remote enterprise network appearing to originate from the endpoint, the bridge being further configured to transfer packets from the remote enterprise network received by the endpoint through the IP tunnel; translating IP addresses in network traffic received by the services platform from the remote enterprise network via the IP tunnel from enterprise network IP addresses to corresponding service platform IP addresses; translating IP addresses in network traffic from the services platform to the remote enterprise network via the IP tunnel from services platform IP addresses to corresponding enterprise network IP addresses; and providing the network service to the remote enterprise network via the IP tunnel and bridge; wherein the providing the network service to the remote enterprise network comprises providing one or more of the following network services;
vulnerability management, configuration auditing, file integrity monitoring, or compliance auditing.
-
Specification