Patent ID: 8904529

Claim:
A system for intrusion protection, the system comprising: a central processing unit (CPU), a computer-readable memory, and a computer-readable storage device; first program instructions to receive from at least one of a client computing device and an external device of a distributed network at multiple successive times, re-registration information for a program agent installed on each of the client computing device and the external device to detect malicious intrusion, the re-registration information notifying a hardware or software intrusion protection device that the program agent is still installed on the client computing device and the external device respectively; second program instructions to subsequently detect inter-network communications, the inter-network communications including communications by the client computing device to a web server and communications to establish a virtual private network communication session by the external device of the distributed network with internal resources of the distributed network; third program instructions to identify a hardware or software device responsible for initiating the inter-network communications; fourth program instructions to determine, in response to detecting inter-network communications, whether the program agent to detect malicious intrusions is installed on the identified device and whether the identified device has re-registered the program agent within a predetermined time interval from a time of a request; and fifth program instructions to allow the inter-network communications if the identified device has re-registered the program agent within the predetermined time interval; and sixth program instructions to block the inter-network communications if the identified device has not re-registered the program agent within the predetermined time interval and if the program agent is not installed, the intrusion protection device delivers the program agent to detect malicious intrusions to the identified device for installation at the identified device without a request by the identified device to receive the program agent, wherein each of the program instructions are stored on the computer-readable storage device for execution by the CPU via the computer-readable memory.