Abstract: A system may receive a configuration associated with a tenant of a multi-tenant generative artificial intelligence (AI) system and tenant-specific training data, where the configuration includes a first indication of a first communication channel over which a tenant-specific conversational agent is to communicate with users and where the tenant-specific training data includes context information associated with the tenant that is expressed in natural language. The system may determine an intent of a query received from the tenant based at least in part on an analysis of the query. The system may transmit the query to a first generative AI model of a plurality of generative AI models, wherein the first generative AI model is selected based at least in part on the determined intent. The system may transmit, to the tenant over the first communication channel, a response to the query generated by the first generative AI model.

Abstract: Methods and systems for distributed denial of service (DDoS) protection management are described. The system may aggregate, from a web application firewall (WAF) bridge service that interfaces with one or more WAF services, one or more DDoS event records associated with one or more DDoS events. The system may analyze the one or more DDoS event records via an analysis of one or more headers and one or more payloads of the one or more DDoS event records, logging information, and a threat intelligence feed. The system may generate a security configuration that indicates one or more parameters of the one or more WAF services to be set. The system may validate the security configuration and may transmit the security configuration to the one or more WAF services based at least in part on the validation.

Abstract: A device may receive a message, associated with establishing a secure session, including a first certificate chain associated with a server device. The device may generate a first certificate fingerprint associated with the first certificate chain and determine a policy identifier associated with a security policy on which the first certificate chain is to be validated. The device may identify a second certificate fingerprint associated with a second certificate chain that has been validated based on the security policy. The device may determine whether the first certificate fingerprint matches the second certificate fingerprint.

Abstract: In general, techniques for are described for providing application metadata using an Internet Protocol Flow Information eXport (IPFIX) protocol in computer networks. In one example, a first network device including a processor and a memory may perform the techniques. The processor may be configured to determine types of the application metadata that the first network device has a capability to detect through analysis of network packets. The application metadata may comprise data representative of network protocols used by networking processes that exchange packets. The memory may be configured to store the application metadata. The processor may further be configured to execute the IPFIX protocol to advertise the types of the application metadata to a second network device configured to collect a subset of the application metadata.

Abstract: In general, techniques for are described for providing application metadata using an Internet Protocol Flow Information eXport (IPFIX) protocol in computer networks. In one example, a first network device including a processor and a memory may perform the techniques. The processor may be configured to determine types of the application metadata that the first network device has a capability to detect through analysis of network packets. The application metadata may comprise data representative of network protocols used by networking processes that exchange packets. The memory may be configured to store the application metadata. The processor may further be configured to execute the IPFIX protocol to advertise the types of the application metadata to a second network device configured to collect a subset of the application metadata.