Patent ID: 8875223
Filing Date: 2014-10-28
Classification: G06F,H04L

Abstract:
1. A system, comprising: a processor of a device for configuring and managing a plurality of remote security devices configured to: receive a registration request for a remote security device, wherein the registration request includes a serial number of the remote security device, a media access control (MAC) address of the remote security device, a user entered unique identifier, or any combination thereof; verify the registration request to determine that the remote security device is an authorized remote security device for an external network; send a response identifying one or more security gateways to the authorized remote security device, wherein the sending of the response includes sending a certificate to the remote security device to establish the associated tunnel; identify an updated set of one or more security gateways to the authorized remote security device, wherein the remote security device is automatically configured to connect to a second security gateway over the remote security device's associated tunnel using a distinct Layer 3 protocol tunnel, and wherein the second security gateway is included in the identified updated set of one or more security gateways; and revoke the certificate issued to the remote security device, wherein the remote security device can no longer connect to a first security gateway after revocation of its certificate; wherein the remote security device is automatically configured to connect to each of the one or more security gateways over the remote security device's associated tunnel using the distinct Layer 3 protocol tunnel; wherein the remote security device is configured to route selected outbound network traffic from the external network to the one or more security gateways over the remote security device's associated tunnel; wherein the one or more security gateways performs security processing on the received outbound traffic based on a security policy; wherein the one or more security gateways forwards the selected outbound network traffic to an original destination after performing the security processing, the original destination being external to a network associated with the one or more security gateways; and wherein the first security gateway and the second security gateway are included in the identified one or more security gateways; and a memory of the device for configuring and managing a plurality of remote security devices coupled to the processor of the device for configuring and managing a plurality of remote security devices and configured to provide the processor of the device for configuring and managing a plurality of remote security devices with instructions.