Abstract: A DLP system with ongoing risk assessment establishes a baseline quantification of data loss risk (“risk score”) of assets identified as sensitive assets and quantifies other dynamic factors as components to be combined or viewed with the baseline risk score. The baseline risk score provides an initial or static view of data loss risk for a sensitive asset at-rest and can be combined with other scoring components to provide different views of risk for a sensitive asset that represent more dynamic aspects. These scoring components relate to access activity over time or historical activity and in-transit activity. The baseline risk score with the dynamic risk scoring components provides a current view of risk and a trending or historical view of risk for the sensitive asset. The in-transit risk scoring component tailors risk assessment to a requestor to provide another perspective or contextualize risk with respect to the requestor.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: A system for virtual internet protocol (VIP) address migration. The system comprises serving one or more clients connected via a switch router over a network to one or more network gateways. The switch router forwards packets to the VIP address of a first network gateway. If the first network gateway determines a VIP address migration criteria has been reached, the first network gateway may migrate any new traffic associated with a packet flow over to a second network gateway for more efficient processing by inserting a default flow code into the header of the VIP address of the packet. Older packets continue to process on the first network gateway, however new packets are forwarded and processed on the second network gateway. Once the packets being processed on the first network gateway completes, the second network gateway becomes the default network gateway for processing existing and new packets.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: Methods and apparatuses for automating return traffic redirection to a service appliance by injecting forwarding policies in a packet-forwarding element are disclosed herein. An example method for automating return traffic redirection can include: establishing a communication channel between a service appliance and a packet-forwarding element; and transmitting an out-of-band message over the communication channel to the packet-forwarding element. The message can include a forwarding policy that requests the packet-forwarding element to forward predetermined packets to the service appliance.

Abstract: A system for virtual internet protocol (VIP) address migration. The system comprises serving one or more clients connected via a switch router over a network to one or more network gateways. The switch router forwards packets to the VIP address of a first network gateway. If the first network gateway determines a VIP address migration criteria has been reached, the first network gateway may migrate any new traffic associated with a packet flow over to a second network gateway for more efficient processing by inserting a default flow code into the header of the VIP address of the packet. Older packets continue to process on the first network gateway, however new packets are forwarded and processed on the second network gateway. Once the packets being processed on the first network gateway completes, the second network gateway becomes the default network gateway for processing existing and new packets.