Patent ID: 8132247
Filing Date: 2012-03-06
Classification: G06Q,H04L,Y10S

Abstract:
1. A method of performing authorization of a client device's secure socket layer virtual private network (SSL VPN) session transferred upon failover from a first appliance to a second appliance, the method comprising: (a) receiving, by a second appliance from a first appliance, information identifying a security string used by the first appliance to authorize a secure socket layer virtual private network (SSL VPN) session established between a client device and a network; (b) detecting, by the second appliance comprising a hardware processor, that the first appliance is unavailable to continue the SSL VPN session; (c) providing, by the second appliance, the SSL VPN session for the client device in response to the detection; (d) placing, by the second appliance, the SSL VPN session on hold until the client device is authorized by the second appliance; and (e) transmitting, by the second appliance, a request to an evaluation component executing on the client device to evaluate at least one clause of the security string, the at least one clause including one or more expressions comprising a logical operation on a value of an attribute of the client device, the logical operation comprising a comparison between the value of the attribute and a predetermined value.