Abstract: A method includes generating, by an internal segmentation orchestrator, a key to cipher/decipher a cryptographic segmentation tag used by an untrusted device, transmitting the key to an external segmentation orchestrator, transmitting the cryptographic segmentation tag to the external segmentation orchestrator and provisioning a trusted network edge with the key and optionally the cryptographic segmentation tag. The method can also include onboarding, based on the key and the cryptographic segmentation tag, the untrusted device, wherein the untrusted device receives the cryptographic segmentation tag from the external segmentation orchestrator.

Abstract: The present technology pertains to a system and method for extending enterprise networks' trusted policy frameworks to cloud-native applications. The present technology comprises sending, by an enterprise network controller, a first communication to a service mesh orchestrator for a service mesh, wherein the first communication informs the service mesh orchestrator of traffic segmentation policies to be applied to traffic originating at an enterprise network and of layer 7 extension headers which correspond to the enterprise network traffic segmentation policies.

Abstract: A method includes generating, by an internal segmentation orchestrator, a key to cipher/decipher a cryptographic segmentation tag used by an untrusted device, transmitting the key to an external segmentation orchestrator, transmitting the cryptographic segmentation tag to the external segmentation orchestrator and provisioning a trusted network edge with the key and optionally the cryptographic segmentation tag. The method can also include onboarding, based on the key and the cryptographic segmentation tag, the untrusted device, wherein the untrusted device receives the cryptographic segmentation tag from the external segmentation orchestrator.

Abstract: The present technology pertains to a system and method for extending enterprise networks' trusted policy frameworks to cloud-native applications. The present technology comprises sending, by an enterprise network controller, a first communication to a service mesh orchestrator for a service mesh, wherein the first communication informs the service mesh orchestrator of traffic segmentation policies to be applied to traffic originating at an enterprise network and of layer 7 extension headers which correspond to the enterprise network traffic segmentation policies.

Abstract: An electrical switching apparatus is for an electrical system. The electrical system has an enclosure and an electrical apparatus coupled to the enclosure. The electrical switching apparatus includes a pair of separable contacts electrically connected to the electrical apparatus, an operating handle for opening and closing the pair of separable contacts, and a support assembly having a cover and an elongated extension extending from proximate the cover to proximate the operating handle. The cover at least partially encloses the pair of separable contacts. The elongated extension is structured to be coupled to the enclosure.

Abstract: A power system having a transformer and integrated power conditioning device is disclosed. The transformer includes a fluid enclosure that holds transformer fluid therein that immerses a core and coil assembly. The power conditioning device is integrated with the transformer and connected thereto to receive an output power and is within an electrical enclosure. A power conditioning circuit is configured to perform power conversion and conditioning on the output power from the transformer. A first set of electrical conductors is coupled between the core and coil assembly and the power conditioning circuit to transfer the output power from the transformer to the power conditioning circuit and a second set of electrical conductors is coupled between the power conditioning circuit and electrical connections on a front plate of the fluid enclosure, the second set of electrical conductors being routed through the fluid enclosure of the transformer.

Abstract: A method of restricting transmission of data packets from a host entity in a network, including: transmitting outgoing packets to destination hosts whose identities are contained in a record stored in a working set of host identity records; over the course of repeated predetermined time intervals, restricting, to a predetermined number, destination hosts not identified in the working to which packets may be transmitted; upon transmission of a packet to a host whose identity is not contained in a record in the working set, adding a record containing the host's identity to the working set and attributing a time to live to the record; deleting each record from the working set whose time to live has expired.

Abstract: A tank, mountable to an opening formed within a mounting pad, includes a front plate, at least one sidewall panel, a pedestal base, and a cover. The at least one sidewall panel is coupled to the front plate to form the tank sides. The pedestal base is coupled to the front plate and a lower portion of the sidewall panels. The cover is coupled to the upper portions of the sidewall panels. The sidewall panels are configured into a first shape which forms a gap between the opening and at least one of the sidewall panels when the sidewall panel lower portions are positioned adjacently above the opening. The pedestal base is configured into a second shape where the outer profile of the coupled pedestal base and the front plate completely covers the opening when disposed over the opening. The tank encloses an electrical device and a dielectric fluid.

Abstract: Method and arrangements are provided for use in managing a network having one more user computing entities and one or more administrative computing entities. One method includes monitoring network traffic from a user computing entity; detecting a client request sent from the user computing entity, and scanning the user computing entity for vulnerabilities.

Abstract: A data-handling system (20) is arranged to scan through data it holds for instances of sensitive information as identified by reference (35) to a set of sensitive-information identifiers held by the system. Each identifier identifies one or more items of sensitive information (25) and is so formed or protected as to not reveal any such item. Following an instance of sensitive information being found by the scan, it is replaced by a reference to an instance of the corresponding sensitive-information item (25) held in protected storage (21). As a result, in due course the only instances of, sensitive information held by the system (20) will be those in the protected storage (21).

Abstract: A tank, mountable to an opening formed within a mounting pad, includes a front plate, at least one sidewall panel, a pedestal base, and a cover. The at least one sidewall panel is coupled to the front plate to form the tank sides. The pedestal base is coupled to the front plate and a lower portion of the sidewall panels. The cover is coupled to the upper portions of the sidewall panels. The sidewall panels are configured into a first shape which forms a gap between the opening and at least one of the sidewall panels when the sidewall panel lower portions are positioned adjacently above the opening. The pedestal base is configured into a second shape where the outer profile of the coupled pedestal base and the front plate completely covers the opening when disposed over the opening. The tank encloses an electrical device and a dielectric fluid.