Systems and methods for managing messages in an enterprise network

• US 8,195,833 B2
• Filed: 01/28/2011
• Issued: 06/05/2012
• Est. Priority Date: 06/10/2002
• Status: Expired due to Term

• Current Assignee: Quest Software, Inc.
• Original Assignee: Quest Software, Inc.
• Inventors: Miller, Randy, Poling, Robert, Pugh, Richard S., Shapiro, Dmitry
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US13/016,899
• Publication Number:
  US 20110131653A1
• Time in Patent Office: 494 Days
• Field of Search: 709/223, 709/224, 709/230, 709/236, 709/238, 709/245, 709/250
• US Class Current: 709/238
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A protocol management system is capable of detecting certain message protocols and applying policy rules to the detected message protocols that prevent intrusion, or abuse, of a network'"'"'s resources. In one aspect, a protocol message gateway is configured to apply policy rules to high level message protocols, such as those that reside at layer 7 of the ISO protocol stack.

Claims

1. A method for managing communication traffic in a network, the method comprising:

intercepting with a gateway module an instant message from a source computing device of a first user intended for an external server configured to redirect the instant message to an intended destination computing device of a second user, wherein the gateway module and the source computing device are located within an enterprise network and the external server is located outside the enterprise network;

identifying the intended destination computing device based at least in part on identifying information associated with the second user;

determining whether the intended destination computing device is within the enterprise network; and

in response to determining that the intended destination computing device is within the enterprise network, redirecting the intercepted instant message to the intended destination computing device by bypassing the external server such that the intercepted instant message does not exit the enterprise network;

wherein at least said redirecting is performed by computer hardware.

2. The method of claim 1, wherein the message comprises an instant message.

3. The method of claim 1, further comprising selecting a policy rule for handling the message and applying the policy rule to the intercepted message.

4. The method of claim 3, wherein the policy rule is based on the intended destination of the intercepted message.

5. The method of claim 3, wherein the policy rule is based on information included in the intercepted message.

6. The method of claim 3, where in the policy rule is based on when the intercepted message is sent or intended to be received.

7. The method of claim 3, wherein the policy rule is based on the size of the intercepted message.

8. The method of claim 3, wherein the policy rule is based on whether the intercepted message includes an attachment.

9. The method of claim 3, wherein the policy rule is based on whether the intercepted message includes a virus.

10. The method of claim 3, further comprising determining if a session associated with the intercepted message is still in progress before applying the policy rule.

11. A system for managing communication traffic in a network, the system comprising:

a gateway module comprising computer hardware, the gateway module configured to be located within an enterprise network and to intercept a message from a source computing device intended for an external server configured to redirect the message to a destination computing device, wherein the external server is located outside the enterprise network, and wherein the gateway module is configured to;

identify an intended user recipient of the message based at least in part on identifying information associated with the user recipient,

determine whether the destination computing device is within the enterprise network, and

in response to determining that the destination computing device is within the enterprise network, redirect the message to the destination computing device by at least bypassing the external server such that the message does not exit the enterprise network.

12. The system of claim 11, wherein the message comprises an instant message.

13. The system of claim 11, wherein the gateway module is further configured to select a policy rule for handling the message and to apply the policy rule to the intercepted message.

14. The system of claim 13, wherein the policy rule is based on the intended destination of the intercepted message.

15. The system of claim 13, wherein the policy rule is based on information included in the intercepted message.

16. The system of claim 13, wherein the policy rule is based on when the intercepted message is sent or intended to be received.

17. The system of claim 13, wherein the policy rule is based on the size of the intercepted message.

18. The system of claim 13, wherein the policy rule is based on whether the intercepted message includes an attachment.

19. The system of claim 13, wherein the policy rule is based on whether the intercepted message includes a virus.

20. The system of claim 13, wherein the gateway module is further configured to determine whether a session associated with the intercepted message is still in progress before applying the policy rule.