Abstract: A computing device may include a memory and a processor configured to cooperate with the memory to store an authentication token having first and second authentication credentials associated therewith. The first and second authentication credentials may be different from one another. The processor may further cooperate with a server to access a session based upon the authentication token.

Abstract: A client application installed on a client device may monitor communications flows between embedded browsers of the client application and one or more servers, including enterprise servers and non-enterprise servers, at upper layers of a network stack of the client device including the application layer, session layer, and presentation layer. Communications to different endpoints may be classified as enterprise or non-enterprise, measured, and aggregated to provide disambiguation of enterprise and non-enterprise communications of the device transiting a single communications link (e.g. cellular data connection). Server and network policies may be applied in accordance with the measurements with higher accuracy than policies based on total bandwidth utilized by the device without regard to its classification.

Abstract: Aspects of the disclosure relate to wrapping continuation tokens to support paging for multiple servers across different geolocations. An enterprise server may receive a first request for a plurality of records, and the first request for the plurality of records may request a quantity of records exceeding a page size limit. In response to receiving the first request, the enterprise server may retrieve a first set of records comprising a first number of records equal to the page size limit. The enterprise server may generate a first wrapped continuation token comprising location information identifying a geographic location of a first server where a next set of records is to be retrieved. Finally, the enterprise server may send, to the client device, the first set of records and the first wrapped continuation token, which may cause the client device to process the first set of records.

Abstract: Described embodiments provide systems and methods for detection of the degradation of a virtual desktop environment. A computing device may receive data from a plurality of client devices. The computing device may identify a subset of client devices from the plurality of client devices with at least one characteristic in common based on the received data. The computing device may determine a ratio of the identified subset of client devices, the ratio being a comparison of client devices of the subset with a value above a first threshold to a total number of client devices of the subset, and the value being indicative of a characteristic of performance for that client device. The computing device may identify a cause of an anomaly in the performance of the application based on the ratio exceeding a second threshold.

Abstract: The present disclosure is directed towards systems and methods for validation of a secure socket layer (SSL) certificate of a server for clientless SSL virtual private network (VPN) access. An intermediary device can receive a first request from a client for a clientless SSL VPN connection to a first server. The intermediary device can determine, using a preconfigured policy, that the first server in the first request meets a condition of the preconfigured policy. The intermediary device 801 can perform, responsive to the determination, an action to validate a SSL certificate of the first server using one or more certificate authority (CA) certificate files available to the intermediary device. The one or more CA certificate files can be specified by the preconfigured policy for the action.

Abstract: A system for optimizing network traffic is described. The system includes a transport communication protocol (TCP) controller configured to acquire data regarding a flow of a plurality of data packets over a link and to determine TCP characteristics for the flow, a traffic prioritization module configured to assign a flow priority to the flow, and a traffic priority controller configured detect congestion on the link and determine a congestion window size for the flow based on the flow priority and the TCP characteristics.

Abstract: System and methods discussed for automatically generating conversation-based reports from email threads for easier and more intuitive user-consumption may include a parser, configured to identify all related emails, extract relevant portions of each email including embedded or in-line comments within quoted portions, and generate a single report document that presents the conversation in chronological order. Duplicate portions of each email are automatically removed and excluded from the report, reducing memory and bandwidth requirements, and also making the report more intuitive and easier to read. Attachments to the email may be included in the report, with additional deduplication to further reduce memory and bandwidth requirements.

Abstract: Systems and methods for establishing a secure connection are described. A server receives a plurality of routing tokens for establishing a service connection between a service node and the server along a network path through a plurality of network devices. The routing tokens can be validated by a corresponding network device. The server transmits a packet including the routing tokens to a first network device. The first network device validates a first routing token associated therewith, then directs the packet along the network path to a second network device, and so forth, until each of the network device receives and validates their routing token. The server establishes a cryptographic context between the service node and server for establishing a secure channel between the service node and the server. The server transmits a service node routing token to the service node via the secure channel for validation.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to provide office safety controls. The at least one processor is further configured to perform computer vision analysis on an image of a shared resource to determine safety related conditions associated with the shared resource, the safety related conditions including a count of people using the shared resource and timing of the use of the shared resource, and update analytics associated with the shared resource based on the determined safety related conditions. The at least one processor is further configured to maintain a notification subscription associated with a user, the notification subscription including user specified safety parameters related to the shared resource, and generate a notification regarding the shared resource, the generation based on a comparison of the updated analytics and the user specified safety parameters.

Abstract: Described embodiments provide systems and methods of selecting files to attach to an electronic mail. A server may identify, for each file of a plurality of files, a file context using content of each file. The server may identify, responsive to a request from a client for one or more attachments to add to an electronic mail, a mail context for the electronic mail based at least on content of the electronic mail. The server may compare the file context of at least one of the plurality of files with the mail context of the electronic mail. The server may select one or more files from the plurality of files based on the comparison of the file context with the mail context. The server may provide the client a list of the one or more files for selection as the one or more attachments for the electronic mail.

Abstract: Methods and systems for remote rendering of extended reality (XR) objects are described herein. A server may receive an image of a physical environment. The image may include different views of the physical environment around a client device. The server may render at least one surface of a virtual object based on the different views of the physical environment. The at least one surface may include a reflection of another object of the physical environment from a view point of the client device at the time the image was taken. The server may generate graphics including the rendered at least one surface. The server may send the generated graphics to the client device to enable display of a computer generated environment on the client device. The computer generated environment may include the at least one virtual object with an appearance of a reflective surface.

Abstract: Techniques are disclosed for providing personalized pages. An example methodology implementing the techniques includes, displaying, by a computing device, a plurality of elements in a page and monitoring interaction with the displayed page. The method also includes, responsive to determining a topic based on the interaction with the plurality of elements in the displayed page, identifying one or more files related to the identified topic and providing an element on the page, the element configured to provide access to one of the identified one or more files in response to an input received on the element. The element may be provided in a file zone in the displayed page.

Abstract: Methods, systems, and apparatuses for discovering dynamic path maximum transmission unit (PMTU) between a sending computing device and a receiving computing device (e.g., a client device and a host device) are described herein. A sending computing device may iteratively transmit bursts of probe packets, each burst being defined by a search range between a maximum packet size and a minimum packet size. The sending computing device may iteratively update the search range based on the previous iteration until the search converges on the PMTU. When the PMTU is discovered, each of the computing devices may update their transport and presentation layer buffers based on the discovered PMTU without any other protocol level disruption. In a multi-path scenario, the computing device may discover PMTU for each of the paths and select a performance optimal path based on the individual PMTUs and other network characteristics such as loss, latency, and throughput.

Abstract: Described herein are systems and methods for managing releases of global services in a controlled manner. A computing environment may include a first release of a global service, a second release of the global service, and a manager service. The first and second release may be enabled and disabled. The first release may be enabled and the second release may be disabled. The second release may be ready for use in the computing environment after passing one or more checks. A manager service may enable use of the second release in the computing environment. The manager service may disable use of (but maintain execution of) the first release in the computing environment. The second release may be determined to have one or more issues. Responsive to determining the second release has issue(s), the manager service may disable use of the second release and re-enable use of the first release.

Abstract: A virtual delivery appliance may include a memory and a processor configured to cooperate with the memory to connect client computing devices with virtual computing sessions provided by a host computing device(s) based upon respective connection leases each including an ordered list of virtual delivery appliances, with at least some of the client computing devices having different ordered lists of virtual delivery appliances. Each client computing device may be configured to request a new session from the virtual delivery appliances in the ordered list in descending order until receiving a connection with a new virtual computing session. The processor may be further configured to re-direct new session requests received from the client computing devices to lower virtual delivery appliances in the ordered list when existing virtual computing sessions for the client computing devices are already active with the host computing device(s) associated with the lower virtual delivery appliances.

Abstract: Described embodiments provide for dynamically optimizing the number of application layer streams that may be multiplexed into a single transport layer connection, providing the advantages of application layer multiplexing without incurring unnecessary congestion-based network delays. A device may monitor net bandwidth and packet loss rates for a connection, and may dynamically increase and decrease a number of concurrent application layer streams to balance throughput and congestion avoidance. As congestion increases, the device may reduce concurrent stream limits in order to spawn additional transport layer connections, allowing faster congestion recovery and reduced performance impairment.

Abstract: A computing device configure to automatically generate responses to user-submitted requests is provided. The device includes a computer readable medium and a processor. The processor can be configured to perform, for example, a virtual assistant that is configured to monitor virtual assistant communications and receive a user-submitted request for additional information from a client device. In some examples, the request is submitted via a virtual assistant. The virtual assistant can be configured to process the user-submitted request to determine one or more keywords and compare the one or more keywords against at least one data set associated with the knowledge base data structure to determine at least one response to the user-submitted request. Based upon the determination of at least one response to the user-submitted request, the virtual assistant monitor can be further configured to generate a reply to the user-submitted request and transmit the reply to the client device.

Abstract: A computing system may include a client device configured to remotely access virtual computing sessions, and a virtual delivery appliance configured to connect the client device to the virtual computing sessions. The client device and the virtual delivery appliance may share a symmetric encryption key and encrypt data communications exchanged therebetween with the symmetric encryption key. The system may further include a gateway appliance configured to relay the encrypted communications between the client device and the virtual delivery appliance, the gateway appliance not having the symmetric key and being unable to decrypt the encrypted communications relayed between the virtual delivery appliance and the client device.

Abstract: Methods, systems, and apparatuses for discovering dynamic path maximum transmission unit (PMTU) between a sending computing device and a receiving computing device (e.g., a client device and a host device) are described herein. A sending computing device may iteratively transmit bursts of probe packets, each burst being defined by a search range between a maximum packet size and a minimum packet size. The sending computing device may iteratively update the search range based on the previous iteration until the search converges on the PMTU. When the PMTU is discovered, each of the computing devices may update their transport and presentation layer buffers based on the discovered PMTU without any other protocol level disruption. In a multi-path scenario, the computing device may discover PMTU for each of the paths and select a performance optimal path based on the individual PMTUs and other network characteristics such as loss, latency, and throughput.

Abstract: Methods, systems, computer-readable media, and apparatuses method for performing single sign on for a user device to the Internet. User sign-in credentials including an identity token of the user are received by a hosted desktop from the user device, including an indication that the user is attempting to access a website. The website is authorized as a trusted website by a network authorization node, and the website is issued a one-time-use token. A web browser of the hosted desktop receives an application provided by the website to cause the web browser to call the hosted desktop to initiate single sign on. Authenticity of the one-time-use token is requested by a daemon process, and the website's public key is obtained. Upon verifying authenticity of the web site, the identity token of the user is passed to the website, to enable the website to establish single sign on with the user.