Patent ID: 11888877
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 7:
8. A device, comprising:
one or more memories; and
one or more processors, communicatively coupled to the one or more memories, configured to:
generate, based on host threat feed information, network segment information, and endpoint host session information associated with a network, a data structure that includes:
information identifying host threat feeds associated with endpoint hosts communicating with the network, and
information associating a plurality of network segments identified in the network segment information with sessions associated with the endpoint hosts;

update the data structure based on a change in a state of a session associated with at least one endpoint host of the endpoint hosts;
identify, based on the data structure, a particular endpoint host, of the endpoint hosts, that changed location within at least one network segment of the plurality of network segments;
automatically determine a threat policy action to enforce for the particular endpoint host that is triggered by the changed location within the at least one network segment; and
cause the threat policy action to be enforced, by the network, for the particular endpoint host.