Patent ID: 9455958
Filing Date: 2016-09-27
CPC Classification: H04L

Claim Text:
1. A method, comprising: receiving a certificate signing request (CSR) at a portal sent from a security device over a public network to authenticate the security device using a serial number associated with the security device; verifying the CSR and the serial number; and sending a certificate from the portal to the security device for using to establish virtual private network (VPN) connections and configuration information for the security device, wherein the certificate includes a credential signed by the portal as a trusted certificate authority, and wherein the configuration information includes gateway configuration information identifying a plurality of gateways to which the security device is configured to connect using VPN connections, wherein each of the plurality of gateways verifies that the certificate is from the trusted certificate authority, and wherein each of the plurality of gateways verifies that the certificate is still valid and has not expired; and wherein the security device receives a list of configured routes from at least one of the plurality of gateways, wherein secure tunnels can then be established using one or more of the configured routes, and wherein for secure tunnels with duplicate routes, the security device is configured to determine route metrics based on a priority of each of the plurality of gateways.