Abstract: A SSH (secure shell) public key is received from a client device 120 120 on the enterprise network, and an EMS device 140 is queried based on the SSH public key. Responsive to confirmation of registration from the EMS server, an authentication certificate based on a user and the client device 120 120 is generated. An SSH session is initiated on behalf of the client device 120 120 including submitting the certificate and the SSH public key from the client device 120 120 to the external server.

Abstract: Various approaches for providing scalable network access processing. In some cases, approaches discussed relate to systems and methods for providing scalable zero trust network access control.

Abstract: Various approaches for providing scalable network access processing. In some cases, approaches discussed relate to systems and methods for providing scalable zero trust network access control.

Abstract: Various approaches for providing scalable network access processing. In some cases, approaches discussed relate to systems and methods for providing scalable zero trust network access control.

Abstract: A SSH (secure shell) public key is received from a client device 120 120 on the enterprise network, and an EMS device 140 is queried based on the SSH public key. Responsive to confirmation of registration from the EMS server, an authentication certificate based on a user and the client device 120 120 is generated. An SSH session is initiated on behalf of the client device 120 120 including submitting the certificate and the SSH public key from the client device 120 120 to the external server.

Abstract: Various approaches for providing scalable network access processing. In some cases, approaches discussed relate to systems and methods for providing scalable zero trust network access control.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, packets are received at a flow classification module operating at the Internet Protocol (IP) layer of a first wide area network (WAN) acceleration device via a private tunnel, which is operable to convey application layer data for connection-oriented applications between WAN acceleration devices. The packets are passed to a WAN socket operating at the transport layer. Based on the application protocol, the packets are passed to an application handler of multiple application handlers operating at the application layer each of which implements one or more application acceleration techniques for a particular application layer protocol known to behave poorly within a WAN environment. The existing connection-oriented flow is securely accelerated by performing one or more application acceleration techniques and applying one or more security functions.

Abstract: The present invention discloses a webpage loading method, a client terminal and a server. The webpage loading method includes: receiving, by a client terminal, a webpage accessing request input by a user; searching locally, by the client terminal, for a reference webpage meeting a preset match condition with the webpage; sending, by the client terminal, the webpage accessing request to a server, and notifying, by the client terminal, the server to use the reference webpage as a reference; receiving, by the client terminal, differential data from the server; and loading, by the client terminal, to obtain a complete webpage according to the reference webpage and the differential data. By means of the present invention, transmission resources can be saved during transmission of webpage resources.

Abstract: A network data transmission method includes: acquiring a network request generated by a client terminal; comparing the network request with a pre-stored network request template to obtain discrepant data and identical data; determining position information of the discrepant data and the identical data in the network request template; and transmitting to a server identification information of the network request template, the discrepant data and the position information, where the identification information will be used to determine the network request template for the server, and the network request template, the discrepant data and the position information will be used to restore the network request for the server.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, packets are received at a flow classification module operating at the Internet Protocol (IP) layer of a first wide area network (WAN) acceleration device via a private tunnel, which is operable to convey application layer data for connection-oriented applications between WAN acceleration devices. The packets are passed to a WAN socket operating at the transport layer. Based on the application protocol, the packets are passed to an application handler of multiple application handlers operating at the application layer each of which implements one or more application acceleration techniques for a particular application layer protocol known to behave poorly within a WAN environment. The existing connection-oriented flow is securely accelerated by performing one or more application acceleration techniques and applying one or more security functions.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, packets are received at a flow classification module operating at the Internet Protocol (IP) layer of a first wide area network (WAN) acceleration device via a private tunnel, which is operable to convey application layer data for connection-oriented applications between WAN acceleration devices. Packets that are classified as being associated with an existing connection-oriented flow are passed to a WAN socket operating at the transport layer. Based on the application protocol, the packets are passed to an application handler of multiple application handlers operating at the application layer each of which implements one or more application acceleration techniques for a particular application layer protocol known to behave poorly within a WAN environment.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, packets are received at a flow classification module operating at the Internet Protocol (IP) layer of a first wide area network (WAN) acceleration device via a private tunnel, which is operable to convey application layer data for connection-oriented applications between WAN acceleration devices. The packets are passed to a WAN socket operating at the transport layer. Based on the application protocol, the packets are passed to an application handler of multiple application handlers operating at the application layer each of which implements one or more application acceleration techniques for a particular application layer protocol known to behave poorly within a WAN environment. The existing connection-oriented flow is securely accelerated by performing one or more application acceleration techniques and applying one or more security functions.

Abstract: A method and apparatus for managing a transfer of data in a data network identifies data associated with a communication session between a first node and a second node in the data network. Further processing of the communication session occurs when a portion of the communication session meets a criterion and the communication session is permitted to continue when the portion of the communication session does not meet the criterion.

Abstract: The present invention discloses a page display method and device. The method comprises: in response to a click operation on a browser by a user, updating, by the browser, a current page display rule according to parameters downloaded from a server corresponding to the browser, and classifying and parsing the updated display rule; receiving, by the browser, a text from a target page, wherein the text contains a tag string used for displaying the target page; when the browser parses a predetermined tag string in the tag strings, invoking, by the browser, the classified and parsed page display rule corresponding to the predetermined tag string to display the page. The technical solution according to the present invention accelerates the display speed of a target page, thus saving network traffic and improving the user experience.

Abstract: The present invention discloses a page display method and device. The method comprises: in response to a click operation on a browser by a user, updating, by the browser, a current page display rule according to parameters downloaded from a server corresponding to the browser, and classifying and parsing the updated display rule; receiving, by the browser, a text from a target page, wherein the text contains a tag string used for displaying the target page; when the browser parses a predetermined tag string in the tag strings, invoking, by the browser, the classified and parsed page display rule corresponding to the predetermined tag string to display the page. The technical solution according to the present invention accelerates the display speed of a target page, thus saving network traffic and improving the user experience.

Abstract: A method and apparatus for managing a transfer of data in a data network identifies data associated with a communication session between a first node and a second node in the data network. Further processing of the communication session occurs when a portion of the communication session meets a criterion and the communication session is permitted to continue when the portion of the communication session does not meet the criterion.

Abstract: Systems and methods for establishing a connection context for a remote server by a web proxy are provided before a request for an object hosted by the remote server is received from a client. According to an embodiment, a web proxy receives a request for a web page from a client and forwards the request to a web server for handling. The web page is received by the web proxy from the web server. The web page is forwarded by the web proxy to the client. A link contained within the web page is extracted by the web proxy. The extracted link corresponds to an object hosted by a remote server. The object is pre-fetched from the remote server by the web proxy using the extracted link. The pre-fetched object is pre-scanned by the web proxy for security threats. A result of the pre-scanning is cached by the web proxy.

Abstract: Systems and methods for establishing a connection context for a remote server by a web proxy are provided before a request for an object hosted by the remote server is received from a client. According to an embodiment, a web proxy receives a request for a web page from a client and forwards the request to a web server for handling. After receiving the web page from the web server, the web proxy forwards the web page to the client. The web proxy extracts a link contained in the web page and establishes a connection context for a remote server of the link without pre-fetching an object of the link from the remote server.

Abstract: A network data transmission method includes: acquiring a network request generated by a client terminal; comparing the network request with a pre-stored network request template to obtain discrepant data and identical data; determining position information of the discrepant data and the identical data in the network request template; and transmitting to a server identification information of the network request template, the discrepant data and the position information, where the identification information will be used to determine the network request template for the server, and the network request template, the discrepant data and the position information will be used to restore the network request for the server.

Abstract: The present invention discloses a webpage loading method, a client terminal and a server. The webpage loading method includes: receiving, by a client terminal, a webpage accessing request input by a user; searching locally, by the client terminal, for a reference webpage meeting a preset match condition with the webpage; sending, by the client terminal, the webpage accessing request to a server, and notifying, by the client terminal, the server to use the reference webpage as a reference; receiving, by the client terminal, differential data from the server; and loading, by the client terminal, to obtain a complete webpage according to the reference webpage and the differential data. By means of the present invention, transmission resources can be saved during transmission of webpage resources.