Patent ID: 11916907
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A method comprising:
receiving a request from a compute instance belonging to a first enterprise network at a firewall directly associated with a second enterprise network that is independent from the first enterprise network, the request received through the second enterprise network and addressed to a network resource coupled to a public internetwork separated from the second enterprise network by the firewall, the firewall coupled to the second enterprise network through a first network interface and coupled to the public internetwork through a second network interface, the compute instance coupled through the second enterprise network to the first network interface of the firewall;
verifying an association of a user of the compute instance with the first enterprise network with a cryptographic authentication of the user of the compute instance at a threat management facility that is external to the first enterprise network and the second enterprise network and is coupled to the firewall through the public internetwork, wherein the threat management facility is configured to independently provide security services for authenticated users from each of the first enterprise network associated with the compute instance and the second enterprise network associated with the firewall;
based on verifying the association of the user of the compute instance with the first enterprise network and a policy for trusted guests, transmitting an authorization from the threat management facility to the firewall directly associated with the second enterprise network for the compute instance belonging to the first enterprise network to access the network resource coupled to the public internetwork via the second enterprise network and through the first and second interfaces and through the firewall; and
in response to the authorization, transmitting the request from the compute instance through the firewall of the second enterprise network to the network resource.