Abstract: An advancement over previous techniques uses push notifications to inform users of actions by a security appliance or network gateway. The network gateway provides network gateway services to a user device and enforces security policies on the communications to and from the user device. When a security policy blocks a communication, the user may know network traffic is being lost but does not know why. The user device can subscribe to a push server using a public encryption key provided by the security appliance. The security appliance can thereafter send push notifications via the push server to the user. The push notifications can inform the user of security policies being applied to communications to and from the user device.

Abstract: This disclosure provides systems, methods and apparatuses, including computer programs encoded on computer storage media, for ranging procedures performed using antenna switching. In one aspect, a device initiating a ranging procedure may transmit a ranging request, which may include antenna switching capabilities of the initiating device, a request for antenna switching by a responding device during the ranging procedure, or both. Ranging signaling may be communicated between the initiating device and the responding device using different transmit antennas, receive antennas, or both. In some implementations, ranging messages transmitted by the responding device may include transmit antenna indices used for transmission of different ranging messages, and receive antenna indices used for reception of different ranging response messages.

Abstract: An advancement over previous techniques uses push notifications to provide users with proxied communications to outside devices reachable using a security appliance or network gateway. Encrypted direct communication between a user device with the outside device is blocked and the user device is provided with a proxy URL at which indirect proxied communications can be provided. A proxy at the proxy URL can read the communications between the user device and the outside device. The proxy can thereby apply security policies to the indirect proxied communications. The security appliance can provide the proxy URL to the user device via a push server.

Abstract: An advancement over previous techniques uses push notifications to provide users with proxied communications to outside devices reachable using a security appliance or network gateway. Encrypted direct communication between a user device with the outside device is blocked and the user device is provided with a proxy URL at which indirect proxied communications can be provided. A proxy at the proxy URL can read the communications between the user device and the outside device. The proxy can thereby apply security policies to the indirect proxied communications. The security appliance can provide the proxy URL to the user device via a push server.

Abstract: An advancement over previous techniques uses push notifications to inform users of actions by a security appliance or network gateway. The network gateway provides network gateway services to a user device and enforces security policies on the communications to and from the user device. When a security policy blocks a communication, the user may know network traffic is being lost but does not know why. The user device can subscribe to a push server using a public encryption key provided by the security appliance. The security appliance can thereafter send push notifications via the push server to the user. The push notifications can inform the user of security policies being applied to communications to and from the user device.

Abstract: In some implementations, an apparatus transmits information indicating a modulation and coding scheme (MCS) table for transmitting non-legacy acknowledgement (ACK) frames during a ranging operation to a responder device, receives a ranging frame including an indication of whether the responder device is capable of supporting the indicated MCS table, and transmits to the responder device an ACK frame using an MCS that is based on the capability of the responder device to support the MCS table. In other implementations, the apparatus receives from an initiator device information indicating an MCS table for transmitting non-legacy ACK frames during the ranging operation, transmits a ranging frame including an indication of whether the apparatus is capable of supporting the indicated MCS table, and receives from the initiator device an ACK frame transmitted using an MCS that is based on the capability of the apparatus to support the MCS table.

Abstract: This disclosure provides systems, methods and apparatuses, including computer programs encoded on computer storage media, for ranging procedures performed using antenna switching. In one aspect, a device initiating a ranging procedure may transmit a ranging request, which may include antenna switching capabilities of the initiating device, a request for antenna switching by a responding device during the ranging procedure, or both. Ranging signaling may be communicated between the initiating device and the responding device using different transmit antennas, receive antennas, or both. In some implementations, ranging messages transmitted by the responding device may include transmit antenna indices used for transmission of different ranging messages, and receive antenna indices used for reception of different ranging response messages.

Abstract: A computing device may receive compressed data that includes a sequence of references corresponding to dictionary words used to compress the compressed data. The computing device may obtain the dictionary words used to compress the compressed data, and identify malicious content corresponding to one or more of the dictionary words. The computing device may also identify malicious content corresponding to the compressed data based on the one or more dictionary words and produce a notification of the malicious content corresponding to the compressed data.

Abstract: A device may receive a packet, obtain data from the packet, store the data in a memory, and send a request to match a portion of the data to a set of patterns, the request identifying the portion in the memory. In addition, the device may access the portion in the memory based on the request, compare the accessed portion to the set of patterns, generate a result by comparing the accessed portion to the set of patterns, and output the result.

Abstract: A device may update at least one old policy to a new policy, obtain data exchanged between endpoints of an ongoing communication session, apply the new policy to the data and not applying the at least one old policy to the data when a start of the communication session has occurred after the updating, and apply the new policy and the at least one old policy to the data when the start of the communication session has occurred before the updating.

Abstract: A device may receive a packet, obtain data from the packet, store the data in a memory, and send a request to match a portion of the data to a set of patterns, the request identifying the portion in the memory. In addition, the device may access the portion in the memory based on the request, compare the accessed portion to the set of patterns, generate a result by comparing the accessed portion to the set of patterns, and output the result.

Abstract: A device may receive a packet, obtain data from the packet, store the data in a memory, and send a request to match a portion of the data to a set of patterns, the request identifying the portion in the memory. In addition, the device may access the portion in the memory based on the request, compare the accessed portion to the set of patterns, generate a result by comparing the accessed portion to the set of patterns, and output the result.

Abstract: Performance enhancement for signature based pattern matching may include one or more signature preprocessing steps. The signatures in the signature set may be preprocessed prior to performing pattern matching, including by breaking each signature broken down into one or more components. For at least one of the one or more components, boundary values as well as possible offsets of the boundary values may be identified and matched against a data stream to determine whether the data stream does not match a particular signature, thereby allowing a quick narrowing of the set of signatures to be applied fully to the data stream.