Abstract: Described embodiments provide systems and methods for selecting one or more firewall rules to apply to a server based at least on identifying a service of the server. A device intermediary to a plurality of clients and a serve may identify a pattern of a firewall to apply to a response from the server to a request from a client of the plurality of clients. The pattern may be to identify a service configured on the server. The device may determine that the response from the server matches the pattern. The device may identify, responsive to the response matching the pattern, that the service is configured on the server. The device may select, based at least on the service, one or more rules for the firewall to apply to responses from the server.

Abstract: Systems and methods of handling sessions between client devices and one or more server based on session classifications are provided. A device identifies a time series of security metrics corresponding to requests received during a session established by a client device to access a resource provided by one or more servers. The device generates security features from the time series of security metrics based on one or more time windows. The device classifies the session as one of anomalous or genuine using the security features generated from the time series of security metrics based on the one or more time windows. The device handles subsequent requests received during the session based on the classification of the session as the one of anomalous or genuine.

Abstract: Methods and systems for recommending files to users are described herein. Files may be recommended to a user within a file sharing service. A recommender system may intelligently recommend files to users according to their preferences through machine learning. In addition, a recommender system may recommend files based on what is popular within a group to which the user belongs. The recommendations may be adjusted based on user interaction with one or more recommended files.

Abstract: Methods and systems for providing services using mixed instance catalogs are described herein. A catalog may comprise a plurality of first virtual machines and a plurality of second virtual machines. The capacity of a first virtual machine may be larger than the capacity of a second virtual machine. Connection requests to access a service associated with the catalog may be distributed among the plurality of first virtual machines and the plurality of second virtual machines.

Abstract: Methods and systems for enabling file attachments in a mobile calendar application are presented. In some embodiments, a mobile device may receive a message comprising an electronic calendar invitation and an electronic file attachment. The mobile device may generate an association between the electronic file attachment received in the message and a calendar event in an electronic calendar mobile application executing on the mobile computing device, wherein the calendar event is associated with the electronic calendar invitation. In response to receiving a selection to display the calendar event in the electronic calendar mobile application, the mobile device may generate a display of the calendar event comprising a display of the associated electronic file attachment in the electronic calendar mobile application.

Abstract: Systems and methods of vertical auto-scaling a networking stack by adjusting the number of packet engines executing on a device are provided. A device intermediary to clients and servers executes first packet engines to process network traffic of a first set of connections. The device determines to adjust the number of packet engines executing on the device based on trigger parameters. The device activates second packet engines to process network traffic for a second set of connections. The device mirrors the network traffic from the first and second set of connections. The first packet engines reject the traffic from the second connections, and the second packet engines reject the traffic from the first connections. The device deactivates the first packet engines when the first connections timeout.

Abstract: Described embodiments provide systems and methods for generating firewall configuration profiles for firewalls. An intermediary device may modify a request from a client to access the server to include a payload provided by the device. The payload may include an action type selected from a plurality of action types used to probe the server for a corresponding security vulnerability of a plurality of security vulnerabilities. The device may transmit, to the server, the request including the payload to cause the server to provide a response to the device. The device may determine that the server is susceptible to a security vulnerability of the plurality of security vulnerabilities corresponding to the action type based at least on the response. The device may generate a configuration profile for the firewall to restrict requests of the action type to access the server from clients.

Abstract: Described embodiments provide systems and methods for enhancing user engagement with micro applications. A computing device can include one or more processors and memory. The computing device can receive an indication of an action to be completed with use of a micro application. The computing device can be in communication with a client device and one or more computing systems of record to execute the micro application. The computing device can values for one or more attributes of the micro application. The computing device can generate, based on the identified values, a score for the micro application. The computing device can provide the score to the client device for display within a user interface. The user interface can be configured to initiate the action with use of the micro application.

Abstract: A computer system including a memory, a network interface, and a processor is provided. The processor is configured to receive, via the network interface, one or more design attributes of a microapp from a microapp development tool hosted by an endpoint device, the one or more design attributes comprising an identifier of a system of record configured to supply data to the microapp; execute a machine learning process trained, using data regarding microapp usage within an organization, to predict at least one user engagement metric for the microapp based on the one or more design attributes; and transmit, via the network interface, the at least one user engagement metric to the microapp development tool hosted by the endpoint device.

Abstract: A virtual desktop server include an application framework comprising a real-time media application to provide real-time communications (RTC), a native RTC engine to execute a portion of the real-time media application when received, and a processor coupled to the application framework and to the native RTC engine. The processor redirects original application program interfaces (APIs) of the real-time media application intended for the native RTC engine based on redirection code injected into the real-time media application so that the portion of the real-time media application is to be redirected. The processor receives from a client computing device capabilities of the client computing device to execute the redirected portion of the real-time media application. The processor switches to a fallback mode if the client computing device has limited capabilities.

Abstract: A method may involve receiving, by a device operated by a user, at least one first input indicating that information is to be shared with at least one individual other than the user. The first device may acquire first biometric data from the at least one individual, and the information may be caused to be made accessible to at least one account that is associated with stored biometric data that matches the first biometric data.

Abstract: Touch, multi-touch, gesture, flick and stylus pen input may be supported for remoted applications. For example, a touch capable client device may receive touch input for a remoted application executing on a server. In such an instance, the touch input may be transmitted to the server for processing. The server may modify the application display or the application functionality and provide an output to the client device. In some arrangements, the output may correspond to instructions for modifying a display of the application while in other examples, the output may correspond to an image of the changed application display. Additionally or alternatively, determining a functionality associated with touch input may be performed based on user definitions, user preferences, server definitions (e.g., operating system on the server), client definitions (e.g., operating system on the client) and the like and/or combinations thereof. Aspects may also include resolving latency and enhancing user experience.

Abstract: Methods, systems, computer-readable media, and apparatuses may provide management of messaging for one or more devices of a user according to the user's configurable presence schedule. A messaging management server may receive notifications of messages and the messages themselves from a messaging service provider. The messages may have originated from a first user and be intended for receipt by a second user. After a preset time period has elapsed, a notification of the message may be sent from the messaging management server to each of the second user's devices in accordance with the second user's presence schedule. Subsequent messages from the first user and intended for the second user may be routed from the messaging management server to the device on which the second user responded to the notification of the initial message and might not be routed to the second user's other devices.

Abstract: A technique controls operation of a local application running on a user device (e.g., a smart phone, a tablet, a personal digital assistant, etc.). The technique involves receiving, by the user device, mouse input from external electronic equipment communicating with the user device. The user device has a touchscreen that displays a touchscreen image of the local application. The mouse input indicates user operation of a hardware mouse. The technique further involves translating, by the user device, the mouse input into translated touchscreen input. The technique further involves providing, by the user device, the translated touchscreen input to the local application running on the user device to operate the local application.

Abstract: A computer system and method for providing location-based application access is provided. For example, the computer system includes a processor configured to receive a connection request for access to a distributed workspace, the connection request including location information for a client device. The processor can access metadata for each of a plurality of location-based applications, the metadata including location information for each of the applications defining at least one physical location where each of the applications can be accessed. The processor can compare the location information against the metadata for each of the applications and determine one or more applications that match the location information for the client device. The processor then can organize each of the applications that have associated location information that matches the location information into a listing of available applications and transmit the listing of available applications for display to a user of the client device.

Abstract: A computing device may include a display, and a processor coupled to the display and configured to generate a GUI current screen on the display. The GUI current screen may include a first window and a second window docked to the first window, the second window overlapping the first window. The processor may be configured to determine an interaction region in the first window based upon user input in the first window, determine a ratio of overlap between the first window and the second window, and resize the second window based upon the ratio of overlap and so that the second window does not overlap the interaction region.

Abstract: Methods and systems for conducting virtual meetings are described herein. A host device configured to host a virtual meeting and one or more user devices may receive information used to set up a virtual meeting from a computing device. The host device may establish a network a user device may connect to for participating in the virtual meeting. The one or more user devices may be directly connected to the host device so that data for the virtual meeting need only travel directly between the one or more user devices and the host device with no intermediary devices. Host responsibilities may be transferred from the host device to one of the user devices. If the host device becomes unresponsive, the computing device may perform actions to allow the user devices to continue the virtual meeting.

Abstract: A method for migrating a virtual desktop may include provisioning a first virtual machine to host the virtual desktop. The first virtual machine may be provisioned to include a first operating system disk and a first identity disk. A snapshot of the first operating system disk may be generated. The virtual desktop may be migrated to a second virtual machine by at least replacing a second operating system disk of the second virtual machine with the first operating system disk. The first identity disk of the first virtual machine and a second identity disk of the second virtual machine may remain unchanged by the migration. Related systems and articles of manufacture are also provided.

Abstract: Systems and methods of vertical auto-scaling a networking stack by adjusting the number of packet engines executing on a device are provided. A device intermediary to clients and servers executes first packet engines to process network traffic of a first set of connections. The device determines to adjust the number of packet engines executing on the device based on trigger parameters. The device activates second packet engines to process network traffic for a second set of connections. The device mirrors the network traffic from the first and second set of connections. The first packet engines reject the traffic from the second connections, and the second packet engines reject the traffic from the first connections. The device deactivates the first packet engines when the first connections timeout.

Abstract: Methods and systems are described for prioritizing notifications based on user responses. The system may include determining a first score indicative of a first relevance of a notification to a first user at a first client device. The first score is determined based on at least metadata characterizing the notification. The notification is prioritized for the first user based on at least the first score. The notification is presented at the first client device based on at least the prioritization for the first user. A second score is determined that is indicative of a second relevance of the notification to a second user at a second client device. The second score is determined based on at least a response to the notification from the first client device.