Cloud Extension Agent Firewall Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in providing cloud-based management solutions for corporate networks that allow secure configuration and management of local resources without compromising traditional firewall security, as existing solutions struggle to implement cloud-based network management and mobile device management due to security concerns.
Innovation Solution
A cloud extension agent is deployed on a local network, capable of initiating a secure connection through existing firewalls using standard internet protocols, allowing real-time communication with cloud services to manage and configure local resources without altering firewall security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud-based management solutions are deployed to enable remote configuration and management of corporate resources, then ease of operation and scalability are improved, but firewall security and network protection are compromised
Solution Approach 1:
A cloud extension agent is deployed as an intermediary component within the corporate network that bridges the gap between cloud-based management services and local resources. The agent receives management instructions from cloud services and executes them locally, enabling cloud-based operation while maintaining firewall security by not requiring direct external access to internal resources.
2Reliability
If local servers are used to maintain security policies and manage mobile devices, then reliability and security control are improved, but device complexity and maintenance burden increase
Solution Approach 1:
The security policy management functionality is extracted from local servers and relocated to cloud-based services. The cloud extension agent acts as a lightweight local component that receives policy updates and enforcement instructions from the cloud, eliminating the need for complex local security management infrastructure while maintaining reliable policy enforcement.
3Ease of operation
If cloud extension agents are deployed to enable real-time communication through firewalls, then ease of operation is improved, but connection reliability may worsen due to firewall restrictions
Solution Approach 1:
The cloud extension agent is pre-configured with connection parameters and authentication credentials before deployment. It establishes persistent connections to cloud services through pre-approved firewall rules, ensuring reliable communication while maintaining simple deployment. The agent handles connection management, reconnection logic, and authentication automatically.
Data Source
AI summary
A software upgrade to be deployed by a cloud extension agent is received by a remote network management platform, the cloud extension agent running locally on a network and initiating an outbound connection to the remote network management platform through a firewall of the network. A command is generated for the software upgrade, the command comprising an identification of a source of the software upgrade. The command is provided to the cloud extension agent, wherein providing the command causes the cloud extension agent to acquire the software upgrade from the identified source and deploy the software upgrade.