Patent ID: 11968269
Assignee: NETSKOPE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A networking method for implementing a tag-based network configuration for a tenant in a network based on tags, the networking method comprising:
receiving a request for establishing a network connection between a client endpoint and a service endpoint of a plurality of gateway endpoints in a network;
identifying a tenant associated with the request and isolating the tenant from a plurality of tenants;
identifying zones associated with the request, wherein the zones include locations of the client endpoint and service endpoint;
assigning a tag to each gateway endpoint in the network based on a tag policy, wherein the tag policy is based on the zones, tenant specific rules, a user location, the network connection, or a priority associated with the plurality of gateway endpoints, and the tag policy specifies connectivity between the tags;
identifying the connectivity of the tags of the plurality of gateway endpoints from network traffic of devices corresponding to the plurality of gateway endpoints;
identifying the tags corresponding to the tenant associated with the request;
identifying patterns from the connectivity of the tags, wherein the patterns include connections between the devices, the gateway endpoints, user locations, or device addresses;
specifying a plurality of tunnels between the tags based on the patterns and the connectivity of the tags;
generating a database of devices with corresponding device addresses, wherein the devices are associated with the corresponding gateway endpoints in the network;
exchanging the database of devices between the plurality of gateway endpoints using a protocol to determine routes between the plurality of gateway endpoints;
determining a secure tunnel from the plurality of tunnels based on the tags corresponding to the tenant; and
establishing the network connection between the client endpoint and the service endpoint via the secure tunnel using the routes between the plurality of gateway endpoints.