Patent ID: 11888890
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 3:
4. A system comprising:
an endpoint in a zero trust network access environment;
a zero trust application for the endpoint;
a gateway for connecting the endpoint to access the zero trust application, the gateway hosted on a first cloud computing platform;
a processor and a memory; and
a threat management facility for an enterprise network, the threat management facility hosted on a second cloud computing platform independent from the first cloud computing platform and the threat management facility in communication with the processor and the memory, the memory storing computer executable instructions embodied in a non-transitory computer readable medium that configure the threat management facility to perform the steps of:
detecting a connection of the gateway to the threat management facility;
storing connection information for the connection of the gateway in a data store associated with the threat management facility;
detecting a disconnection of the gateway;
storing disconnection information for the disconnection of the gateway in the data store associated with the threat management facility;
asynchronously analyzing the disconnection to determine if the disconnection occurred according to a connection reset rule for the second cloud computing platform hosting the threat management facility by applying one or more rules to the connection information and the disconnection information stored in the data store; and
in response to determining that the disconnection did not occur according to the connection reset rule for the second cloud computing platform, initiating a remediation of the gateway.