发明名称 Systems and methods for enhanced client side policy
摘要 An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.
申请公布号 US9407608(B2) 申请公布日期 2016.08.02
申请号 US201414448298 申请日期 2014.07.31
申请人 CITRIX SYSTEMS, INC. 发明人 Mullick Amarnath;Venkatraman Charu;Nanjundaswamy Shashi;He Junxiao;Soni Ajay;Stavrakos Nicholas;Koopmans Chris
分类号 G06F17/00;H04L29/06 主分类号 G06F17/00
代理机构 Foley & Lardner LLP 代理人 Foley & Lardner LLP ;McKenna Christopher J.;Khan Shabbi S.
主权项 1. A method for adjusting tuning settings based on an attribute of a client, the method comprising: (a) identifying, by a device intermediary to a client and a content server, a policy for evaluating the client responsive to a first request of the client to access the content server, the policy specifying an expression comprising a clause to be evaluated by the client to identify an attribute of the client, the attribute identifying at least one of an application of the client, network data, a characteristic of a network to which the client is connected or user preferences; (b) transmitting, by the device to the client, responsive to identifying the policy for evaluating the client, a second request to the client to have the client evaluate the clause to identify the attribute of the client; (c) receiving, by the device from the client, a response to the second request, the response comprising the attribute of the client; (d) receiving, by a server intermediary to at least the client and the content server, the attribute of the client from the device, the server comprising tuning settings for improving performance of communications of response data from the content server to the client; and (e) adjusting, by the server, the tuning settings based on the attribute of the client to improve the performance of communications of the response data from the content server to the client.
地址 Fort Lauderdale FL US