DNS Probing for Enterprise Network Migration Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for detecting user migration from an enterprise network to a non-enterprise network are error-prone, particularly relying on IP address detection, which is not reliable, and lack automated mechanisms for non-domain users, leading to insecure remote connections and manual network detection.
Innovation Solution
A method using DNS probing to determine network changes by sending queries to enterprise DNS servers, where a positive response indicates the user is within the enterprise network, and a lack of response indicates they are outside, triggering secure tunnel establishment for seamless access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If IP address-based detection is used to detect enterprise network, then the detection process is simple, but the detection accuracy is low and error-prone
Solution Approach 1:
The patent introduces DNS server as an intermediary component to detect enterprise network presence. Instead of directly checking IP addresses, the system sends DNS queries to enterprise DNS servers, and the presence/absence of responses from these intermediary servers reliably indicates whether the device is on the enterprise network, resolving the contradiction between simple detection and accurate detection.
2Device complexity
If manual network detection is used, then the system requires minimal automated components, but the user convenience deteriorates and security risks increase
Solution Approach 1:
The system implements automated self-service detection by continuously monitoring DNS query responses from enterprise DNS servers. The detection mechanism automatically identifies network transitions without user intervention, and the remote access client automatically establishes or terminates secure connections based on detection results, eliminating manual detection requirements while maintaining security.
3Productivity
If remote connection with Always Connect property is enabled, then the user can continuously access enterprise network, but unnecessary remote connections are created when already on enterprise network
Solution Approach 1:
The system implements feedback-based connection management by continuously monitoring DNS query responses and using this feedback to dynamically control remote connection state. When DNS queries to enterprise servers succeed, the system feedback indicates enterprise network presence and terminates unnecessary remote connections. When queries fail, feedback indicates external network presence and triggers secure connection establishment, ensuring accurate connection management.
Data Source
AI summary
Disclosed herein are a method, a device, and a non-transitory computer readable medium for detecting user migration from an enterprise network to a non-enterprise network by using DNS probing. The method includes detecting at least one of a change in state of network connection and change in operational state of a user migration computing device. A domain name system (DNS) query is generated in response to detecting the at least one of a change in state of network connection and change in operational state of a user migration computing device. Further, the DNS query is sent to at least one of a plurality of DNS servers. If an expected DNS response is received, it is determined that the user migration computing device is in the enterprise network. If expected DNS response is not received, that the user migration computing device is outside the enterprise network.