Systems and methods for network filtering in VPN

摘要

Described are systems and methods for managing network packet traffic between a client device and an enterprise server. A list of enterprise-authorized applications is maintained. Data packets, such as TCP and UDP data packets, communicated from applications running on the device are analyzed to determine an originating application corresponding to each packet. The originating application is compared to the list of authorized applications, and a VPN tunnel is created for the packet to access the enterprise server if the corresponding originating application is an authorized application.

主权项

1. A system comprising:
at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the system to perform:
maintaining a list of authorized applications that are authorized to access an enterprise server;analyzing a plurality of packets originating from applications running on a client device; andfor each packet of the plurality of packets:
determining an originating application of that packet;comparing the originating application to the list of authorized applications; andtransmitting that packet over a VPN to the enterprise server when the originating application is an authorized application.