Patent ID: 9300633
Filing Date: 2016-03-29
CPC Classification: H04L

Claim Text:
1. A method comprising: obtaining, at a cloud access manager executing on at least one hardware processor, input regarding access control for at least one application deployed on a plurality of virtual machine instances in a cloud computing environment; with said cloud access manager executing on said at least one hardware processor, dividing said plurality of virtual machine instances into at least first and second access zones in accordance with said input; registering, with a cloud access manager registrar located in said cloud computing environment, internet protocol addresses of external clients as seen from said cloud computing environment, at least some of said registered internet protocol addresses comprising public internet protocol addresses assigned to said clients via network address translation; carrying out session traversal utility for network address translation to determine said public internet protocol addresses assigned to said clients via said network address translation; with said cloud access manager executing on said at least one hardware processor, controlling, based on said registered internet protocol addresses: in accordance with said access zones, such that: