US 11,671,477 B2
Firewall multi-level security dynamic host-based sandbox generation for embedded URL links
Hugo Vazquez Carames, Barcelona (ES)
Assigned to SONICWALL INC., Milpitas, CA (US)
Filed by SONICWALL US HOLDINGS INC., Milpitas, CA (US)
Filed on Apr. 12, 2022, as Appl. No. 17/719,203.
Application 17/719,203 is a continuation of application No. 16/251,818, filed on Jan. 18, 2019, granted, now 11,303,693, issued on Apr. 12, 2022.
Application 16/251,818 is a continuation of application No. 14/665,315, filed on Mar. 23, 2015, granted, now 10,187,446, issued on Jan. 22, 2019.
Prior Publication US 2022/0239722 A1, Jul. 28, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); H04L 67/02 (2022.01); H04L 9/40 (2022.01); G06F 21/53 (2013.01)
CPC H04L 67/02 (2013.01) [G06F 21/53 (2013.01); H04L 63/0227 (2013.01); H04L 63/1441 (2013.01); H04L 63/168 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method for protecting requesting devices from infectious content, the method comprising:
receiving at a sandbox computer a request for digital content at an original universal resource locator (URL) hosted by a host computer, wherein the original URL was embedded in a communication sent to a destination device, and wherein the request for the digital content originated at the destination device and was intercepted by a firewall that reconfigured the original URL into a reconfigured URL pointing to the sandbox computer;
generating a second request for the digital content, the second request generated at the sandbox computer and responsive to the request received at the sandbox computer in accordance with the reconfigured URL;
sending the second request from the sandbox computer to the host computer;
retrieving the digital content from the host computer corresponding to the original URL;
rendering the digital content retrieved from the host computer, wherein the digital content is rendered by an isolated browser instance of the sandbox computer;
generating a representation of the digital content as rendered by the isolated browser instance, wherein the generated representation is in a different format than the digital content retrieved from the host computer;
sending the generated representation to the destination device instead of the requested digital content in response to the request; and
identifying that the retrieved digital content includes the infectious content when at least one process of the sandbox computer is identified as infected.