Patent ID: 11924241
Assignee: LOOKOUT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 19:
20. A method for a network gateway wherein endpoint devices communicate with the network gateway using at least one network, the method comprising:
communicating with a plurality of endpoint agents running on the endpoint devices, wherein each endpoint agent is configured to gather metadata associated with a respective endpoint device and send the gathered metadata to the network gateway;
receiving, from at least one endpoint agent, first metadata;
gathering second metadata associated with traffic on the at least one network;
monitoring, based at least on the first and second metadata, for one or more policy violations by the endpoint devices, wherein the first and second metadata are gathered in real-time while performing the monitoring;
identifying policy violations for a plurality of first endpoint devices;
in response to identifying the policy violations, enforcing a respective policy for each of the first endpoint devices to remediate the policy violations;
determining a first software component or process on at least one of the first endpoint devices;
determining a second software component or process on a second endpoint device that is similar to the first software component or process within a comparison threshold; and
causing the second endpoint device to limit or block the second software component or process.