Abstract: A mobile device management method includes: a first electronic device sends a request message including an identifier of at least one second electronic device to a first server. The first electronic device receives a DM service APP from the first server and installs the DM service APP. After the DM service APP is installed, the first electronic device can provide the MDM service. The first electronic device provides the MDM service for the second electronic device, to implement management and device system upgrade of the second electronic device.

Abstract: A device may receive an input associated with deploying a virtual firewall on a computing device. The device may determine a first set of characteristics associated with the virtual firewall and a second set of characteristics associated with a hypervisor associated with the computing device. The device may automatically tune the virtual firewall based on the first set of characteristics and the second set of characteristics. The device may deploy the virtual firewall after tuning the virtual firewall.

Abstract: Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Abstract: Some embodiments provide a novel method for resiliently associating Internet Protocol (IP) addresses with pods that each have unique identifiers (IDs) in a managed cluster of worker nodes managed by a first set of one or more controllers of the managed cluster. The resilient association between IP addresses and pods is maintained even when pods are moved between worker nodes. At a second set of controllers, the method receives notification regarding deployment, on a first worker node, of a stateful pod associated with a particular ID. The method allocates an IP address to the stateful pod. The method creates a mapping between the IP address and the particular ID in order to maintain the allocation of the IP address to the stateful pod. The method provides the IP address to the first set of controllers to use for the stateful pod.

Abstract: An example method of entity lifecycle management in a service monitoring system includes: receiving, by a software application of a service monitoring system, a policy definition specifying an entity lifecycle management policy, wherein the entity lifecycle management policy defines management rules for a plurality of entities in the network environment, wherein each entity of the plurality of entities is represented by one of: a device, an application, a service, or a user account; identifying, by applying the entity lifecycle management policy to a plurality of active entities, one or more candidate entities for retirement; retiring at least a subset of the one or more candidate entities; and excluding the retired entities from the plurality of active entities, thus preventing the retired entities from interacting with other components of the service monitoring system.

Abstract: Techniques are described by which a network management system (NMS) provides a common user interface (UI) to enable a user to collectively configure network devices to establish an EVPN topology. For example, an NMS is configured to: generate data representative of a common UI comprising UI elements representing a plurality of network devices to be configured in an EVPN topology; receive, via the common UI, an indication of a user input selecting one or more of the UI elements representing selected network devices; generate UI elements representing a plurality of ports of the selected network devices; receive, via the common UI, an indication of a user input selecting the UI elements representing one or more selected ports; and generate, based on the one or more selected network devices and one or more selected ports, topology relationship information of the one or more selected devices to establish the EVPN topology.

Abstract: Some embodiments provide a novel method for enforcing service policies at different container clusters configured by several SDN controller clusters. A first SDN controller cluster defines a particular service policy to be enforced for machines in first, second, and third container clusters. First, second, and third sets of network elements for the first, second, and third container clusters are managed by the first, a second, and a third SDN controller cluster respectively. For data message flows exchanged between machines in the first and second container clusters, the first SDN controller cluster distributes the particular service policy to service nodes only in the first container cluster. For data message flows exchanged between machines in the second and third container clusters, the first SDN controller cluster distributes the particular service policy to service nodes in at least one of the second and third container clusters.

Abstract: Systems and methods are provided for identifying an available infrastructure network topology consisting of a set of available network links and a set of available network nodes of a communication network. In the systems and methods, a network node of the communication network is operative to transmit a learning schedule to a plurality of network nodes interconnected by a set of network links of the communication network. The network node receives from each of the plurality of network nodes a communication node record including network performance observations observed by that network node based on the learning schedule transmitted to that network node. Based on the received communication node records, the network node identifies a set of available network links from the set of network links and the set of available network nodes corresponding to the set of available network links.

Abstract: Disclosed are various implementations of approaches for continuous delivery of management configurations. In some examples, a management configuration delivery workflow is retrieved from a source environment. The management configuration is transmitted to a destination environment specified in the management configuration delivery workflow. The destination environment us updated to apply the management configuration.

Abstract: Systems and methods include an automation network comprising a gateway at a premises. The gateway is coupled to a remote network and is configured to control components at the premises including at least one of a thermostat and a lock. A sensor user interface (SUI) is coupled to the gateway and presented to a user via remote client devices. The SUI includes display elements for managing and receiving data of the components agnostically across the remote client devices. The display elements include an interactive icon comprising control regions. Each control region is configured to control a state change of a corresponding component.

Abstract: A network of surgical hubs is disclosed comprising a first surgical hub comprising a first control circuit and a second surgical hub comprising a second control circuit. The first control circuit is programmed to determine a priority of a process related to a surgical procedure based on a requirement of a surgical device used during the surgical procedure in communication with the first control circuit. The first control circuit is programmed to selectively distribute an execution of the process related to the surgical procedure and process data to the second control circuit based on the priority of the process.

Abstract: According to some embodiments, a method includes receiving, from a graphical user interface, an indication that a user has purchased licenses associated with a CNF. The method further includes sending, to a second computing system of a CNF, first instructions regarding the licenses purchased by the user. The method further includes receiving an indication that the user wishes to deploy a particular router in the CNF with a particular data connection and retrieving, from the second computing system of the CNF, a list of licenses previously purchased by the user. The method further includes automatically determining, from the list of licenses, appropriate licenses for the particular router that the user wishes to deploy in the CNF. The method further includes sending second instructions that are operable to deploy the particular router in the CNF with the particular data connection and apply the determined licenses to the deployed particular router.

Abstract: A method for identifying devices on a network, comprising: determining, by a discovery application, a prioritized discovery plan including a plurality of tiers of requests, each of the tiers specifying one or more probes for targeting specific types of devices. For each of the tiers in the prioritized discovery plan: the method further comprises causing, by the discovery application, one or more of the probes specified for the tier to transmit targeted requests to a set of active addresses on the network. Upon receiving responses from at least a subset of the one or more addresses, the method comprises identifying, by the discovery application, one or more devices connected to the network based on the responses to the targeted requests. The method further comprises removing, by the discovery application, addresses corresponding to the identified one or more devices from the set of active addresses on the network.

Abstract: Groups of connected nodes in a network of nodes can be detected for evaluating and mitigating risks of the network of nodes. For example, a system can process one or more subnetworks of the network of nodes in parallel. For each subnetwork, the system can identify root nodes and their reachable nodes to create rooted groups of connected nodes. The system then can determine outdegrees of the remaining nodes in the network. The system can identify reachable nodes from a remaining node of the highest outdegree to create a nonrooted group of connected nodes. The system can estimate a risk value based on the number of rooted groups and nonrooted groups, the number of nodes in each rooted group and nonrooted group, and the attributes of the nodes in each group. The system can mitigate potential risks by reconfiguring the network of nodes.

Abstract: Techniques are provided for identifying duplicate usages of configuration values in Network Management Interfaces (NMIs). Network administrators may inadvertently enter duplicate values such as Internet Protocol addresses in one or more NMIs. A browser extension captures a configuration value and determines whether it has been used already, such as by accessing a database with the value and a field type. If it has been used, summary and/or detailed information can displayed on the NMI describing the duplicate usages. The summary display can be a hyperlink which indicate a number of duplicate usages in other views and NMIs. When the hyperlink is selected, a pop-up display can provide detailed information by rendering the other views in a read-only mode, of a same NMI or other NMIs. To render the views, a Document Object Model and Cascading Style Sheet Object Model of the views can be accessed.

Abstract: A network change verification (NCV) system is disclosed for checking whether a proposed configuration change on a network alters the way that the network controls recently observed network flows. In embodiments, the system builds an observed flow control model (OFCM) from logs of recent flows observed in the network. The OFCM, which may be periodically updated based on newly observed flows, provides a compact representation of how individual network flows were ostensibly controlled by the network. When a proposed configuration change is received, the system analyzes the change against the OFCM to check whether the change will alter how the network controls recently observed flows. If so, the proposed change is blocked, and an alert is generated identifying flows that are affected by the change. The NCV system thus prevents network operators from accidentally making changes on the network that will materially alter the behavior of the network.

Abstract: A field data transmission method comprises: a cloud platform determining at least one first device operation index be obtained via data analysis. For each first device operation index, the cloud platform generates control information for the first device operation index. The control information is used to determine a primary edge controller from among at least one edge controller, wherein the primary edge controller is used to send first field data to the cloud platform, the first field data is used for data analysis by the cloud platform to obtain the first device operation index, and the first field data is obtained by the primary edge controller preprocessing second field data. The cloud platform sends each piece of control information to each edge controller, respectively. The cloud platform receives first field data from each primary edge controller, respectively.

Abstract: Examples to determine media impressions using distributed demographic information are disclosed. An example system includes programmable circuitry to log, at a first Internet domain, a first record for a first website visit by a first client device to a website at a second Internet domain, the first record based on a hypertext transfer protocol (HTTP) request, the first record to include a timestamp, a uniform resource locator (URL), and a user identifier, the timestamp to represent a time of the first website visit, the URL corresponding to the website at the second Internet domain, and weight impression data in a report, the impression data associated with the first record and with second records, the second records corresponding to second website visits to the website via second client devices, the weighting of the impression data based on demographic distributions of audience members corresponding to the first and second records.

Abstract: Techniques are described for enabling a cloud-based IT and security operations application to execute playbooks containing custom code in a manner that mitigates types of risk related to the misuse of cloud-based resources and security of user data. Users use a client application to create and modify playbooks and, upon receiving input to save a playbook, the client application determines whether the playbook includes custom code. If the client application determines that the playbook includes custom code, the client application establishes a connection with a proxy application (also referred to as an “automation broker”) running in the user's own on-premises network and sends a representation of the playbook to the proxy application. The client application further sends to the IT and security operations application an identifier of the playbook and an indication that the playbook (or the custom code portions of the playbook) is stored within the user's on-premises network.

Abstract: A method and a system for arranging a user multi-session from a plurality of user sessions, where the sessions are received from a plurality of computerized client devices communicatively coupled via a communication network to at least one content server. At least some of the client devices may be operated by a same user, and the data content may include at least part of data communicated between any client device and any content server. The method including dividing the received data content into a plurality of sessions, where at least two sessions are associated with the same user, selecting at least two sessions received from at least two respective client devices associated with the same user, and associating the selected at least two sessions to form a multi-session.