Patent ID: 11888890
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 5:
6. A method comprising:
detecting a connection of an edge networking device to a threat management facility hosted for an enterprise network on a cloud computing platform;
storing connection information for the connection of the edge networking device, the connection information including a time stamp for a time of creation of the connection;
detecting a disconnection of the edge networking device;
storing disconnection information for the disconnection of the edge networking device, the disconnection information including a second time stamp for a second time of the disconnection;
asynchronously analyzing the disconnection to determine if the disconnection occurred according to a connection reset rule for the cloud computing platform hosting the threat management facility; and
in response to determining that the disconnection did not occur according to the connection reset rule for the cloud computing platform, initiating a remediation of the edge networking device.