Patent ID: 11882125
Assignee: NETSKOPE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A policy based system for a plurality of client devices establishing a secure session with remote instances on a web server using an encryption protocol, the policy based system comprising:
a plurality of servers, and
one or more processor devices collectively having instruction code when executed for:
customizing a set of policies for content on a client device of the plurality of client devices with a policy component having a plurality of policies, wherein:
the set of policies from the plurality of policies are customized based on a set of parameters, and
the set of policies specify configuration settings of encryption protocols,

receiving from a local application running on the client device of the plurality of client devices, selection of a cloud service from a plurality of cloud services, wherein the the plurality of cloud services are accessed from the web server;
provisioning on a mid-link server between the client device and the web server, wherein the mid-link server:
controls web traffic for establishing connections between the client device and the web server,
checks the connections corresponding to the set of policies, and

comprises a router configured to provision the set of policies for the secure session to the web server, wherein the set of policies are customized to specify the configuration settings of encryption protocols;
determining an encryption link of a plurality of encryption links specified for the set of policies and the cloud service, wherein the plurality of encryption links deliver the cloud service to the client device in accordance with the set of policies for the plurality of cloud services when connecting with the client device, the set of policies are modified when the encryption link does not meet the set of policies;
selecting a session protocol from a plurality of session protocols for establishing the secure session between the client device and the web server in accordance with the modified set of policies; and
establishing by the router via the encryption link the secure session of the client device with the web server based on the selected session protocol.