Patent ID: 8875220
Filing Date: 2014-10-28
Classification: G06F,H04L

Abstract:
1. A method, comprising: receiving, at a proxy controlling access to a network, a request for access to the network from an application on an endpoint; analyzing headers of the request received at the proxy from the application; identifying, by the proxy, the application on the endpoint sending the request based on the analysis of the headers of the request received at the proxy from the application; selecting a policy to reference for indication of characteristics of the application to be considered compliant for granting access to the network based on the analysis of the headers; determining, by the proxy, whether the one or more headers of the request received at the proxy from the application on the endpoint include characteristics of the application to be considered compliant for granting access to the network based on the analysis by the proxy of one or more headers; in response to determining that the one or more headers do not include characteristics of the application to be considered compliant for granting access to the network, denying, by the proxy, the request for access of the endpoint to the network; and in response to determining that the one or more headers include characteristics of the application to be considered compliant for granting access to the network, forwarding, by the proxy, the request of the endpoint to the network on behalf of the application, wherein determining that the one or more headers do not include characteristics of the application to be considered compliant for granting access to the network comprises determining: that at least one expected header is missing; that the one or more headers comprises at least one typographical error; and that the one or more headers comprises MIME types that are inconsistent with the determined information about the application, and wherein forwarding the request to the network on behalf of the application in response to determining that the one or more headers include characteristics of the application considered compliant for granting access to the network comprises: determining, by the proxy, that the one or more headers comprise the characteristics of the application considered compliant for granting access to the network; receiving, at the proxy, a key from the application; and forwarding, in response to validating the received key by the proxy, the request to the network on behalf of the application.