Patent ID: 11916907
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system comprising:
a firewall coupled to a first network interface and a second network interface, the firewall directly associated with a first enterprise network and coupled to the first enterprise network through the first network interface, and the firewall coupled to a public internetwork through the second network interface;
a compute instance belonging to a second enterprise network, the compute instance coupled through the first enterprise network to the first network interface of the firewall; and
a threat management facility, external to the first enterprise network and the second enterprise network, coupled in a communicating relationship with the firewall through the public internetwork, wherein:
the first enterprise network is independent from the second enterprise network, the threat management facility is configured to provide security services independently for authenticated users from each of the first enterprise network associated with the firewall and the second enterprise network associated with the compute instance, the threat management facility is configured to manage a security policy for the firewall, and the threat management facility is further configured to cryptographically authenticate a user of the compute instance, verify an association of the user of the compute instance with the second enterprise network, and based on authentication of the user with respect to the second enterprise network, operate the firewall directly associated with the first enterprise network to enable the compute instance belonging to the second enterprise network to access the public internetwork via the first enterprise network and through the first and second network interfaces and the firewall according to a policy for trusted guests.