Abstract: A method for maintaining a cache of dynamically generated objects. The method includes storing in the cache dynamically generated objects previously served from an originating server to a client. A communication between the client and server is intercepted by the cache. The cache parses the communication to identify an object determinant and to determine whether the object determinant indicates whether a change has occurred or will occur in an object at the originating server. The cache marks the object stored in the cache as invalid if the object determinant so indicates. If the object has been marked as invalid, the cache retrieves the object from the originating server.

Abstract: A method for automatically changing a version of a client agent for a non-administrative user account without rebooting the user's machine uses a service having installation privileges. The service executes on the client and installs a client agent. The client agent communicates with a network appliance. The client agent detects a difference between its version and a version of the client agent identified by the network appliance. The agent signals the service that it has detected the difference and, in response, the service executes an installation program that installs, without rebooting the client, the version of the client agent identified by the appliance. A corresponding system is also described.

Abstract: This invention also relates to pharmacological compositions containing the compounds of the present invention, and methods of treating asthma, rheumatoid arthritis, COPD, rhinitis, osteoarthritis, psoriatic arthritis, psoriasis, pulmonary fibrosis, pulmonary inflammation, acute respiratory distress syndrome, periodontitis, multiple sclerosis, gingivitis, gingivitis, atherosclerosis, dry eye, neointimal proliferation, which leads to restenosis and ischemic heart failure, stroke, renal diseases, tumor metastasis, and pounds.

Abstract: A device that implements a method for performing integrated caching in a data communication network. The device is configured to receive a packet from a client over the data communication network, wherein the packet includes a request for an object. At the operating system/kernel level of the device, one or more of decryption processing of the packet, authentication and/or authorization of the client, and decompression of the request occurs prior to and integrated with caching operations. The caching operations include determining if the object resides within a cache, serving the request from the cache in response to a determination that the object is stored within the cache, and sending the request to a server in response to a determination that the object is not stored within the cache.

Abstract: A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.

Abstract: Systems and methods are described for using a client agent to manage HTTP authentication cookies. One method includes intercepting, by a client agent executing on a client, a connection request from the client; establishing, by the client agent, a transport layer virtual private network connection with a network appliance; transmitting, by the client agent via the established connection, an HTTP request comprising an authentication cookie; and transmitting, by the client agent via the connection, the connection request.

Abstract: In a method and system for routing packets between clients, a packet is received from a first client connected to a secure sockets layer virtual private network (an SSL/VPN) network appliance. An identification is made, responsive to an inspection of the received packet, of i) a type of connection required for transmission of the received packet to a destination address identified by the received packet and ii) a second client connected via an SSL/VPN connection to the SSL/VPN network appliance and associated with the identified destination address. A request is made for establishment by the second client of a connection of the identified type within the SSL/VPN connection. The received packet is transmitted to the second client via the established connection of the identified type.

Abstract: A method for intercepting, by an agent of a client, communications from the client to be transmitted via a virtual private network connection includes the step of intercepting communications based on identification of an application from which the communication originates. The agent receives information identifying a first application. The agent determines a network communication transmitted by the client originates from the first application and intercepts that communication. The agent transmits the intercepted communication via the virtual private network connection.

Abstract: The present invention relates to ?-hydroxy and amino-substituted carboxylic acids, which act as matrix metalloproteinase inhibitors, particularly diastereomerically pure ?-hydroxy carboxylic acids, corresponding processes for their synthesis, and pharmaceutical compositions containing the compounds of the present invention. Compounds of the present invention are useful in the treatment of various inflammatory, autoimmune, and allergic diseases, such as methods of treating asthma, rheumatoid arthritis, COPD, rhinitis, osteoarthritis, psoriatic arthritis, psoriasis, pulmonary fibrosis, wound healing disorders, pulmonary inflammation, acute respiratory distress syndrome, perodontitis, multiple sclerosis, gingivitis, atherosclerosis, neointimal proliferation, which leads to restenosis and ischemic heart failure, stroke, renal diseases, tumor metastasis, and other inflammatory disorders characterized by the over-expression and over-activation of a matrix metalloproteinase.

Abstract: The present invention relates to ?-hydroxy and amino-substituted carboxylic acids, which act as matrix metalloproteinase inhibitors, particularly diastereomerically pure ?-hydroxy carboxylic acids, corresponding processes for their synthesis, and pharmaceutical compositions containing the compounds of the present invention. Compounds of the present invention are useful in the treatment of various inflammatory, autoimmune, and allergic diseases, such as methods of treating asthma, rheumatoid arthritis, COPD, rhinitis, osteoarthritis, psoriatic arthritis, psoriasis, pulmonary fibrosis, wound healing disorders, pulmonary inflammation, acute respiratory distress syndrome, perodontitis, multiple sclerosis, gingivitis, atherosclerosis, neointimal proliferation, which leads to restenosis and ischemic heart failure, stroke, renal diseases, tumor metastasis, and other inflammatory disorders characterized by the over-expression and over-activation of a matrix metalloproteinase.

Abstract: In a method and system for routing packets between clients, a packet is received from a first client connected to a secure sockets layer virtual private network (an SSL/VPN) network appliance. An identification is made, responsive to an inspection of the received packet, of i) a type of connection required for transmission of the received packet to a destination address identified by the received packet and ii) a second client connected via an SSL/VPN connection to the SSL/VPN network appliance and associated with the identified destination address. A request is made for establishment by the second client of a connection of the identified type within the SSL/VPN connection. The received packet is transmitted to the second client via the established connection of the identified type.

Abstract: Systems and methods are described for using a client agent to manage HTTP authentication cookies. One method includes intercepting, by a client agent executing on a client, a connection request from the client; establishing, by the client agent, a transport layer virtual private network connection with a network appliance; transmitting, by the client agent via the established connection, an HTTP request comprising an authentication cookie; and transmitting, by the client agent via the connection, the connection request.

Abstract: Techniques for remote presence subscription are described. In an embodiment, a technique may include presenting a view interface to a client, where the client user may select what kind of presence information, and for whom, they would like to receive. The techniques may further comprise receiving a selection of presence data through the view interface from the client; creating a view from the selection at a web service; translating the view into a request having a protocol useable by a presence server to retrieve information for the view; requesting and receiving the information for the view using the request; and providing the information for the view to the client. Other embodiments are described and claimed.

Abstract: The present invention relates to ?-hydroxy and amino substituted carboxylic acids, which act as matrix metalloprotease inhibitors, particularly diastereomerically pure ?-hydroxy carboxylic acids, corresponding processes for the synthesis of and pharmaceutical compositions containing the compounds of the present invention. Compounds of the present invention are useful in the treatment of various inflammatory, autoimmune and allergic diseases, such as methods of treating asthma, rheumatoid arthritis, COPD, rhinitis, osteoarthritis, psoriatic arthritis, psoriasis, pulmonary fibrosis, wound healing disorders, pulmonary inflammation, acute respiratory distress syndrome, periodontitis, multiple sclerosis, gingivitis, atherosclerosis, neointimal proliferation, which leads to restenosis and ischemic heart failure, stroke, renal diseases, tumor metastasis, and other inflammatory disorders characterized by the over-expression and over-activation of a matrix metalloproteinase using the compounds.

Abstract: The present invention is directed towards a “flash crowd” technique for handling situations where the cache receives additional requests, e.g., nearly simultaneous requests, for the same object during the time the server is processing and returning the response object for a first requestor. Once all such nearly simultaneous requests are responded to by the cache, the object is flushed from the cache, with no additional expiry time or invalidation action needed. This technique of the present invention enables data to be cached and served for very small amounts of time for objects that would otherwise be considered non-cacheable. As such, this technique yields a significant improvement in applications that serve fast changing data to a large volume of concurrent users, such, for example, as real time stock quotes, or a fast evolving news story.

Abstract: A method for intercepting, by an agent of a client, communications from the client to be transmitted via a virtual private network connection includes the step of intercepting communications based on identification of an application from which the communication originates. The agent receives information identifying a first application. The agent determines a network communication transmitted by the client originates from the first application and intercepts that communication. The agent transmits the intercepted communication via the virtual private network connection.

Abstract: A method for maintaining a cache of dynamically generated objects. The method includes storing in the cache dynamically generated objects previously served from an originating server to a client. A communication between the client and server is intercepted by the cache. The cache parses the communication to identify an object determinant and to determine whether the object determinant indicates whether a change has occurred or will occur in an object at the originating server. The cache marks the object stored in the cache as invalid if the object determinant so indicates. If the object has been marked as invalid, the cache retrieves the object from the originating server.

Abstract: Methods for enabling assured records using fine grained auditing of virtual private network traffic include establishing, by an appliance, a transport layer virtual private network connection with a client operated by a user; receiving, by the appliance via the connection, a request from the client identifying a resource; determining, by the appliance, the request meets at least one security condition; transmitting, by the appliance to an audit log, a record of the request; receiving, by the appliance from the audit log, a confirmation that the record was logged; and granting, responsive to the received confirmation, access to the identified resource. Security conditions may identify at least one user, at least one application, a network or group of networks, and one or more resources. Corresponding systems are also described.

Abstract: An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.

Abstract: A method for maintaining a cache of dynamically generated objects. The method includes storing in the cache dynamically generated objects previously served from an originating server to a client. A communication between the client and server is intercepted by the cache. The cache parses the communication to identify an object determinant and to determine whether the object determinant indicates whether a change has occurred or will occur in an object at the originating server. The cache marks the object stored in the cache as invalid if the object determinant so indicates. If the object has been marked as invalid, the cache retrieves the object from the originating server.