Abstract: A technique for authenticating network users is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for authenticating network users. The method may comprise receiving, from a client device, a request for connection to a network. The method may also comprise evaluating a security context associated with the requested connection. The method may further comprise assigning the client device one or more access privileges based at least in part on the evaluation of the security context.

Abstract: In one embodiment, a method for providing link layer discovery protocol (LLDP) to a distributed fabric includes sending a neighbor synchronization request message from a master node to one or more member nodes connected to the master node, the neighbor synchronization request message including a request for a recipient member node to send its LLDP neighbor information to the master node, receiving a neighbor synchronization update message at the master node from at least one of the one or more member nodes, the neighbor synchronization update message including information about local LLDP neighbors of the one or more member nodes, and storing the information about the local LLDP neighbors from the at least one of the one or more member nodes in a LLDP neighbors database of the master node.

Abstract: In one embodiment, a method for providing link layer discovery protocol (LLDP) to a distributed fabric includes sending a neighbor synchronization request message from a master node to one or more member nodes connected to the master node, the neighbor synchronization request message including a request for a recipient member node to send its LLDP neighbor information to the master node, receiving a neighbor synchronization update message at the master node from at least one of the one or more member nodes, the neighbor synchronization update message including information about local LLDP neighbors of the one or more member nodes, and storing the information about the local LLDP neighbors from the at least one of the one or more member nodes in a LLDP neighbors database of the master node.

Abstract: An apparatus and method for event-based data capture from network flows are provided. At a network device, a network flow is received that comprises a plurality of packets each comprising control information and data. The network flow is monitored for the occurrence of at least one predetermined triggering event. In response to detecting the triggering event, at least a portion of one or more of the packets received after the triggering event is captured, and the captured portion is exported to an analysis server. The network device may comprise any device configured to forward flows of packets such as, for example, switches, routers, firewalls, etc.

Abstract: A technique for providing secure network access is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for providing secure network access. The method may comprise establishing a plurality of access zones in a network, wherein client devices assigned to different access zones have different access privileges and are isolated from one another. The method may also comprise assigning a client device to one of the plurality of access zones based on an assessment of a security context associated with the client device and a connection of the client device to the network.

Abstract: A technique for authenticating network users is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for authenticating network users. The method may comprise receiving, from a client device, a request for connection to a network. The method may also comprise evaluating a security context associated with the requested connection. The method may further comprise assigning the client device one or more access privileges based at least in part on the evaluation of the security context.

Abstract: A technique for providing secure network access is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for providing secure network access. The method may comprise establishing a plurality of access zones in a network, wherein client devices assigned to different access zones have different access privileges and are isolated from one another. The method may also comprise assigning a client device to one of the plurality of access zones based on an assessment of a security context associated with the client device and a connection of the client device to the network.