Abstract: Described are a method and system for seamless roaming of a mobile node during a VPN session. A VPN session between the mobile node and a current VPN server in a network is established and synchronized with at least one fail-over VPN server in the network. An address change message is sent to the current VPN server and the fail-over VPN servers upon roaming of the mobile node. A fail-over VPN server responds with a reply message and is registered as a current VPN server for continuation of the VPN session. To load balance, a load query message is sent to the current VPN server and the fail-over VPN servers. Reply messages include server performance characteristics of the VPN servers. The VPN session can be transferred from the current VPN server to a fail-over VPN server in response to the server performance characteristics.

Abstract: To prevent loss of packets due to failover between server systems in which a failover mechanism is provided in a first server system to enable a second server system to failover to the first server system, the first server system includes a first sequence number space that is different from a second sequence number space in the second server system. The first and second sequence number spaces are part of a total sequence number space. After failover from the second server system to the first server system, the first server system sends packets containing sequence numbers in the first sequence number space which are defined by a security protocol.

Abstract: Rules are used to determine a compliance level for a computing device attempting to access a network. The compliance level may have multiple categories or facets, that may be determined individually or collectively, to determine a score for the computing device. The score may be used to determine whether the computing device should obtain access to the network, the type of access to be granted, or whether remediation should occur and what type of remediation should occur on the computing device to enable the computing device to enjoy greater network privileges. Optionally, the score may be weighted in connection with the user privileges associated with the user as determined during the authentication process, to enable users with greater network access privileges to access the network in situations where other users may not be able to access the network.

Abstract: Described are a method and system for seamless roaming of a mobile node during a VPN session. A VPN session between the mobile node and a current VPN server in a network is established and synchronized with at least one fail-over VPN server in the network. An address change message is sent to the current VPN server and the fail-over VPN servers upon roaming of the mobile node. A fail-over VPN server responds with a reply message and is registered as a current VPN server for continuation of the VPN session. To load balance, a load query message is sent to the current VPN server and the fail-over VPN servers. Reply messages include server performance characteristics of the VPN servers. The VPN session can be transferred from the current VPN server to a fail-over VPN server in response to the server performance characteristics.

Abstract: A network device is able to selectively preserving or over-writing user-defined state information during a reboot event using intelligent scripts. In one embodiment, the network device is configured to run a script containing intelligence during a reboot event. The intelligence is able to ascertain the cause of the reboot event and use a script appropriate for the particular reboot event. Additionally, the network device, running the script, is able to ascertain whether any user-defined state information exists, whether that user-defined state information conflicts with any scripted state information, and how any conflict between the user-defined state information and the scripted state information should be resolved.