Dynamic and interoperable generation of stateful VPN connection profiles for computing devices

摘要

Systems, methods, apparatuses, and computer program products are described herein that enable a computing device to dynamically generate virtual private network (VPN) connection profiles to which policies can be mapped and then subsequently enforced. The VPN connection profiles are dynamically generated by a translation engine by obtaining parameters from payloads received from a plurality of different VPN gateways pursuant to establishing connections therewith in accordance with a respective plurality of different tunneling protocols, which may include both standard and proprietary tunneling protocols. The dynamically-generated VPN connection profiles are then provided to a connection manager, which enforces any policies associated with the VPN connection profiles when servicing requests for connections received from applications running on the computing device.

主权项

1. A system implemented on a computing device, comprising:
at least one processor; and memory that is accessible by the at least one processor, the memory storing components for execution by the at least one processor, the components including:
a translation engine operable to obtain parameters from payloads received from a plurality of different virtual private network (VPN) gateways pursuant to establishing connections therewith in accordance with a respective plurality of different tunneling protocols, and to generate a plurality of uniformly-formatted, non-tunneling-protocol-specific VPN connection profiles based on the parameters, each VPN connection profile including a connection target identifier and one or more connection policies associated therewith; anda connection manager operable to receive the VPN connection profiles generated by the translation engine and to enforce the connection polices associated therewith.