Patent ID: 11916775
Assignee: NETSKOPE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A non-transitory computer-readable medium comprising computer-executable code, the computer-executable code configured for:
receiving a request for accessing data from a client endpoint using a gateway device, wherein the request is provided by sending data packets;
provisioning a connection from the gateway device to a control plane in a cloud control plane, wherein:
the cloud control plane provisions the connection to a service endpoint at a cloud provider for providing access to the data using a data plane and the control plane, and
the control plane is isolated from the data plane;
identifying by the control plane, routing information of network traffic from a plurality of devices corresponding to a plurality of tenants;
identifying a tenant associated with the request and isolating the tenant from the plurality of tenants;
identifying network patterns from the routing information, wherein the network patterns include connections between devices, the gateway endpoints, user locations, or device addresses;
determining a network policy associated with the access to the data based on the network patterns, wherein the network policy specifies routing for access to the data, and the network policy is based on tenant specific rules, applications, the user locations, network preferences, or priorities;
determining a secure tunnel from a plurality of tunnels for providing access to the data based on the network policy and the network patterns from the routing information, wherein the secure tunnel connects the client endpoint and the service endpoint;
forwarding the data packets by the data plane for access to the data on the secure tunnel using the routing information; and
providing the access to the data from the cloud provider to the client endpoint on the gateway device using the secure tunnel.