Web Caching with Security as a Service

摘要

In one implementation, Web-Cache deployed in the Enterprise premises and cloud-based SecaaS are combined such that similar identity-based polices are enforced on both the SecaaS and content delivered from the Web-Cache. This identity-based policy implementation outside the network using SecaaS and within the network for web-cached content provides consistent identity-based security while still providing content to end-users with high performance. Content inspected and/or modified by SecaaS may be cached in the enterprise premises so that requests for content from an origin server decreases, freeing Internet bandwidth and reducing access time. Local caching of streaming content may decrease latency while local implementation of identity-based policy continues to limit the streamed content as appropriate. Local implementation of identity-based policy may reduce the load on SecaaS. Rather than using content delivery networks provided by a service provider for web-content, a cache server within the enterprise is used.

主权项

1. A method comprising:
intercepting, at a cloud connector device of a network, a request from a user for content; when the content is not cached in the network:
redirecting the request to cloud-based security as a service server;receiving the content from the cloud-based security as a service server;routing the content to a cache server; andreceiving at a cloud connector identity-based security policy from the cloud-based security as a service server for the content; when the content is cached in the network:
determining whether the request satisfies an identity-based security policy;sending the request to the cache server when the request satisfies the identity-based security policy; andrejecting the request when the request fails to satisfy the identity-based security policy.