Abstract: In some implementations, a method can include determining a virtual machine (VM) inventory baseline of a system, including identifying VMs in a baseline configuration and generating a VM fingerprint for each VM in the inventory baseline, and detecting a user onboarded VM and moving the user onboarded VM to a quarantine operating area for a period of time. The operational posture of the user onboarded VM can be compared to an operational posture policy of the system. When the operational posture of the user onboarded VM meets the operational posture policy of the system, the user onboarded VM is moved from the quarantine area to an operational area, and, when the operational posture of the user onboarded system does not meet the operational policy posture of the system and the period of time has expired, the user onboarded VM is terminated.

Abstract: Methods, systems and computer readable media for managing access of visitors to a facility as described herein can provide a seamless process by which a visitor of an organization may be granted access not only to the physical facility but also automatically granted network access (e.g., granted access to an enterprise network) with limited or no external human touch points and without compromising security.

Abstract: Methods, systems and computer readable media for a captive portal having dynamic, context-based whitelisting are described.

Abstract: In some implementations, a method can include determining a virtual machine (VM) inventory baseline of a system, including identifying VMs in a baseline configuration and generating a VM fingerprint for each VM in the inventory baseline, and detecting a user onboarded VM and moving the user onboarded VM to a quarantine operating area for a period of time. The operational posture of the user onboarded VM can be compared to an operational posture policy of the system. When the operational posture of the user onboarded VM meets the operational posture policy of the system, the user onboarded VM is moved from the quarantine area to an operational area, and, when the operational posture of the user onboarded system does not meet the operational policy posture of the system and the period of time has expired, the user onboarded VM is terminated.

Abstract: Methods, systems and computer readable media for managing access of visitors to a facility are described.

Abstract: Methods, systems and computer readable media for a captive portal having dynamic, context-based whitelisting are described.

Abstract: Methods, systems and computer readable media for user authentication for proxy-configured clients in captive portal deployments are described. In some implementations, the method can include receiving, at a captive portal, a request from a client device to resolve a proxy IP address, and determining whether the client device has been authenticated. The method can also include, when the client device has not been authenticated, causing the captive portal to act as an intermediate domain name system (DNS) server and forwarding the DNS request to one or more other DNS servers, and evaluating any received responses from the one or more other DNS servers. The method can include, when received responses contain an IP address, replying to the client with the received IP address, and when the received responses do not contain an IP address, replying to the client with an IP address of the captive portal.

Abstract: Methods, systems and computer readable media for user authentication for proxy-configured clients in captive portal deployments are described. In some implementations, the method can include receiving, at a captive portal, a request from a client device to resolve a proxy IP address, and determining whether the client device has been authenticated. The method can also include, when the client device has not been authenticated, causing the captive portal to act as an intermediate domain name system (DNS) server and forwarding the DNS request to one or more other DNS servers, and evaluating any received responses from the one or more other DNS servers. The method can include, when received responses contain an IP address, replying to the client with the received IP address, and when the received responses do not contain an IP address, replying to the client with an IP address of the captive portal.