Patent ID: 9660998
Date: 2017-05-23
CPC Classifications: H04L

Claim:
1. A computer-implemented method, comprising: maintaining, at a secure proxy server within a trusted environment, a set of policies including requirements for providing communication with computing resources outside the trusted environment; maintaining a set of network addresses associated with a plurality of computing resources, the set of network addresses continuously updated to include network addresses currently associated with the plurality of computing resources; receiving, from an application, a request to access a computing resource at an endpoint outside of the trusted environment; identifying a subset of the set of policies relevant to the application based at least in part on a network protocol layer to which the computing resource belongs, the subset of policies including: identifying, from the set of network addresses, a subset of network addresses currently associated with the computing resource that excludes the endpoint, the subset of network addresses identified in accordance with the subset of policies; determining an authorized network address of the subset of network addresses to be used in communicating with the computing resource, the authorized network address being one that has been validated using the set of policies; establishing a network connection with the computing resource at the authorized network address; routing information between the computing resource and the application via the established network connection, the information being subjected to the set of policies; and performing at least one action of the set of actions based at least in part on a condition related to the data fields of the set of criteria being met by the information.