Abstract: Techniques are provided for securely storing data files in, or retrieving data files from, cloud storage. A data file transmitted to cloud storage from a client in an enterprise computing environment is intercepted by at least one network device. Using security information received from a management server, the data file is converted into an encrypted object configured to remain encrypted while at rest in the cloud storage.

Abstract: Techniques are provided for securely storing data files in, or retrieving data files from, cloud storage. A data file transmitted to cloud storage from a client in an enterprise computing environment is intercepted by at least one network device. Using security information received from a management server, the data file is converted into an encrypted object configured to remain encrypted while at rest in the cloud storage.

Abstract: Methods and apparatus are provided to allow Internet Key Exchange (IKE) phase 1 keying materials to be periodically refreshed in a secure manner without requiring user interaction. A client and server perform authentication and key exchange during set up of a secure connection. A token is passed to the client by the server during or after the initial user authentication phase. The token is stored both at the client and at the server. Instead of requiring user credentials, the token can be used to securely prove the identity of the client.

Abstract: Methods and systems for configuring a remote device are described. In one embodiment, a method of configuring a remote device while negotiating a secure connection between the remote device and a central server is described. The method involves transmitting a configuration request from the remote device to the central server, including a request for a location to retrieve the latest configuration file from. The method also entails receiving a configuration response from the central server, with a pointer to such a location. The configuration file is retrieved from the indicated location, and applied to the remote device. The remote device sends general information about its configuration and status to the central server, using the secure connection.

Abstract: Methods and apparatus are provided for enhancing security and fault tolerance for VPN gateways connecting clients in a public network with entities in a private network. According to various embodiments, primary and standby VPN gateways serving the same private network are configured with the same virtual IP address to allow public network clients the ability to efficiently switchover to a standby VPN gateway upon failure of the primary VPN gateway. Cryptography operations are executed using the virtual IP address. Routes can also be injected into the private network to enhance failover efficiency.

Abstract: Methods and systems for configuring a remote device are described. In one embodiment, a method of configuring a remote device while negotiating a secure connection between the remote device and a central server is described. The method involves transmitting a configuration request from the remote device to the central server, including a request for a location to retrieve the latest configuration file from. The method also entails receiving a configuration response from the central server, with a pointer to such a location. The configuration file is retrieved from the indicated location, and applied to the remote device. The remote device sends general information about its configuration and status to the central server, using the secure connection.

Abstract: Methods and apparatus are provided to allow Internet Key Exchange (IKE) phase 1 keying materials to be periodically refreshed in a secure manner without requiring user interaction. A client and server perform authentication and key exchange during set up of a secure connection. A token is passed to the client by the server during or after the initial user authentication phase. The token is stored both at the client and at the server. Instead of requiring user credentials, the token can be used to securely prove the identity of the client.