Virtual Network Interface Traffic Control Using a Domain Catalog
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure web gateways (SWG) solutions struggle to integrate seamlessly into organizational workflows and require preconfigured network resources, leading to security vulnerabilities and inefficiencies in content filtering and network traffic management, especially in zero trust network environments.
Innovation Solution
A system and method that utilizes a virtual network interface (VNI) configured on client devices to communicate through a zero trust network environment, allowing network traffic management through a domain catalog and deep packet inspection, enabling secure access to resources while integrating with existing workflows.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure web gateway is deployed to filter content and inspect network traffic, then security is improved, but device complexity and integration difficulty increase
Solution Approach 1:
The patent introduces a namespace as an intermediary layer between the client device and the secure web gateway. The namespace contains multiple names that map to different network resources, allowing the gateway to filter and inspect traffic without the client device needing to directly interact with complex security infrastructure. This mediator approach maintains security while reducing the complexity burden on client devices.
2Reliability
If network resources are preconfigured in a dedicated network space, then content filtering capability is improved, but adaptability to different workflows and environments decreases
Solution Approach 1:
The patent implements dynamic name assignment within the namespace, where names can be assigned and reassigned to different network resources based on client device needs and workflow requirements. This dynamic approach allows the content filtering capability to adapt to different environments and workflows without sacrificing security, as the namespace structure remains flexible rather than rigidly preconfigured.
3Reliability
If standalone SWG applications are used, then security control is improved, but ease of operation and workflow integration deteriorate
Solution Approach 1:
The patent merges the namespace functionality with the secure web gateway operation, combining what would traditionally be separate components into an integrated system. The namespace is created and managed as part of the gateway's normal operation rather than as a separate preconfiguration step, improving ease of operation while maintaining security control through the unified architecture.
Data Source
AI summary
A system and method for directing network traffic in a client device based on a domain catalog. The method includes generating a virtual network interface having a namespace with a plurality of names, wherein a first name of the namespace is assigned to a client device; assigning a second name of the namespace to a resource accessible to the client device through a zero trust network environment; configuring the client device to communicate only through the virtual network interface; and sending network traffic to the resource, in response to determining that the resource is allowed based on a domain catalog.