Systems and methods for enhanced client side policy

• US 9,407,608 B2
• Filed: 07/31/2014
• Issued: 08/02/2016
• Est. Priority Date: 05/26/2005
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Mullick, Amarnath, Venkatraman, Charu, Nanjundaswamy, Shashi, He, Junxiao, Soni, Ajay, Stavrakos, Nicholas, Koopmans, Chris
• Primary Examiner(s): Traore, Fatoumata
• Application Number:
  US14/448,298
• Publication Number:
  US 20140344891A1
• Time in Patent Office: 733 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.

Claims

1. A method for adjusting tuning settings based on an attribute of a client, the method comprising:

(a) identifying, by a device intermediary to a client and a content server, a policy for evaluating the client responsive to a first request of the client to access the content server, the policy specifying an expression comprising a clause to be evaluated by the client to identify an attribute of the client, the attribute identifying at least one of an application of the client, network data, a characteristic of a network to which the client is connected or user preferences;

(b) transmitting, by the device to the client, responsive to identifying the policy for evaluating the client, a second request to the client to have the client evaluate the clause to identify the attribute of the client;

(c) receiving, by the device from the client, a response to the second request, the response comprising the attribute of the client;

(d) receiving, by a server intermediary to at least the client and the content server, the attribute of the client from the device, the server comprising tuning settings for improving performance of communications of response data from the content server to the client; and

(e) adjusting, by the server, the tuning settings based on the attribute of the client to improve the performance of communications of the response data from the content server to the client.

2. The method of claim 1, wherein the expression comprises a plurality of clauses joined by one or more logical operators, each clause of the plurality of clauses to be evaluated by the client to identify a different attribute of the client.

3. The method of claim 1, wherein (e) further comprises adjusting the tuning settings that correspond to the network data.

4. The method of claim 1, wherein (e) further comprises adjusting the tuning settings that correspond to the network data.

5. The method of claim 1, wherein (e) further comprises adjusting the tuning settings that correspond to the characteristic of the network.

6. The method of claim 1, wherein (e) further comprises adjusting, by the server, the tuning settings based on the user preferences.

7. The method of claim 1, further comprising manipulating, by the server, response data from the content server based on techniques corresponding to the adjusted tuning settings.

8. A system for adjusting tuning settings based on an attribute of a client, the system comprising:

a device intermediary to a client and a content server, the device configured to identify a policy for evaluating the client responsive to a first request of the client to access the content server, the policy specifying an expression comprising a clause to be evaluated by the client to identify an attribute of the client, the attribute identifying at least one of an application of the client, network data, a characteristic of a network to which the client is connected or user preferences;

a server intermediary to at least the client and the content server, the server comprising tuning settings for improving performance of communications of response data from the content server to the client;

wherein the device is configured to transmit, responsive to identifying the policy for evaluating the client, a second request to the client to have the client evaluate the clause and receive from the client, a response to the second request, the response comprising the attribute of the client; and

wherein the server is configured to receive the attribute of the client from the device and adjust the tuning settings based on the attribute of the client to improve the performance of communications of the response data from the content server to the client.

9. The system of claim 8, wherein the expression comprises a plurality of clauses joined by one or more logical operators, each clause of the plurality of clauses to be evaluated by the client to identify a different attribute of the client.

10. The system of claim 8, wherein the server is configured to adjust the tuning settings that correspond to the application.

11. The system of claim 8, wherein the server is configured to adjust the tuning settings that correspond to the network data.

12. The system of claim 8, wherein the server is configured to adjust the tuning settings that correspond to the characteristic of the network.

13. The system of claim 8, wherein the server is configured to adjust the tuning settings based on the user preferences.

14. The system of claim 8, wherein the server is configured to manipulate response data from the content server based on techniques corresponding to the adjusted tuning settings.