Agentless Network Remediation via External Incident Processing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network maintenance and health monitoring systems rely on agents installed on network devices to detect and remediate issues, which is not feasible for closed systems and does not consider broader network parameters in decision-making.

Innovation Solution

The system detects problematic network behavior and deploys countermeasures without an agent on the device, using a processor to provide telemetry to an external incident solution processing service, which generates remediation commands that can be executed by the network elements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an agent is installed on a network device to detect and remediate issues, then the ability to monitor and remediate network issues is improved, but the compatibility with closed systems deteriorates

Engineering Contradiction:
Improvenetwork issue detection and remediation capabilityVSAvoidcompatibility with closed systems
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an intermediary system (external incident solution processing system) that mediates between the monitoring needs and the closed network devices. This external system collects telemetry data from closed systems without requiring agents, processes the data to identify incidents, and generates remediation commands that are executed by the closed devices themselves, thus resolving the contradiction between monitoring capability and system compatibility

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a virtual copy of the monitoring and remediation functionality in an external system rather than installing physical agents on closed devices. The external incident solution processing system replicates the incident detection and remediation capabilities outside the closed system boundaries, allowing monitoring without direct device modification

Inventive Principle:
Principle #26Copying

2Ease of operation

If an agent is used to apply remediation on network devices, then the remediation execution capability is improved, but the system complexity and deployment difficulty increase

Engineering Contradiction:
Improveremediation execution capabilityVSAvoidagent installation and coordination complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent extracts the agent component from the network devices and relocates it to an external incident solution processing system. By taking out the agent from each individual device and centralizing it externally, the system eliminates the complexity of installing and coordinating multiple agents across different devices while maintaining full remediation execution capability

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent enables network devices to execute remediation commands autonomously based on instructions from the external system. The closed devices themselves perform the remediation actions without requiring external agents to directly manipulate them, allowing the devices to serve themselves while still receiving coordinated guidance from the external incident solution processing system

Inventive Principle:
Principle #25Self-service

3Speed

If remediation decisions are made based only on given network device parameters, then the decision-making speed is improved, but the comprehensiveness of remediation considerations deteriorates

Engineering Contradiction:
Improveremediation decision-making speedVSAvoidbroader network parameter consideration
Core Design Contradiction:
SpeedVSLoss of information

Solution Approach 1:

The patent merges multiple data sources and parameter types into a unified analysis framework in the external incident solution processing system. By combining telemetry data from various network devices, contextual information, and remediation history into a single comprehensive system, the patent enables fast decision-making that considers broader network parameters rather than isolated device metrics

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS20250071138A1Systems and methods for deploying agentless countermeasures in a network environment
Publication Date: 2025.02.27 FORTINET INC
  • US20250071138A1 patent drawing
  • US20250071138A1 patent drawing
  • US20250071138A1 patent drawing

AI summary

Various approaches for providing network maintenance and health monitoring are discussed. In some cases, some approaches include systems, methods, and/or devices that provide for detecting problematic network behavior and deploying countermeasures in relation to the detected behavior without an agent operating on the device where the countermeasures are implemented.