Using events to identify a user and enforce policies

Abstract

Enforcing a policy is described. A mapping between an IP address of a device and a user identity is identified, at least in part by correlating event information. A policy is applied to the device based at least in part on the user identity. One example of an event is an access to a mail server, such as an access to a Microsoft Exchange server.

Description

BACKGROUND OF THE INVENTION[0001]Devices such as firewalls are sometimes used to prevent users, such as employees of a company, from accessing resources to which they are not authorized. As an example, access to a specific website or to a class of websites may be prohibited for all users. Access can also be granted in a more granular level, such as by permitting some users or groups of users to access a resource, while prohibiting access for other users / groups. Unfortunately, enforcing granular polices can be difficult, particularly as the number and variety of types of devices present in an enterprise network continue to increase.BRIEF DESCRIPTION OF THE DRAWINGS[0002]Various embodiments of the invention are disclosed in the following detailed description and the accompanying drawings.[0003]FIG. 1 illustrates an embodiment of an environment in which user identities are determined based on events (such as Microsoft Exchange events) and in which policies that incorporate the identiti...

AI Technical Summary

Benefits of technology

The invention is a system that uses events from devices in a network to determine user identities and enforce policies that incorporate those identities. This can be difficult as the number of devices in the network increases. The invention aims to make it easier to enforce granular policies that prevent unauthorized access to resources. The invention can be implemented as a process, apparatus, system, composition of matter, computer program product, or processor. The invention can be used in various types of devices, such as computers, cell phones, and tablets. The invention can also be used in combination with other techniques, such as data appliances and firewalls.

Problems solved by technology

Unfortunately, enforcing granular polices can be difficult, particularly as the number and variety of types of devices present in an enterprise network continue to increase.