US 11,838,299 B2
Cloud-based web content processing system providing client threat isolation and data integrity
Uli P. Mittermaier, Boston, MA (US); and Alex-Marian Negrea, Bucharest (RO)
Assigned to Zscaler, Inc., San Jose, CA (US)
Filed by Zscaler, Inc., San Jose, CA (US)
Filed on Dec. 4, 2019, as Appl. No. 16/702,889.
Claims priority of provisional application 62/823,220, filed on Mar. 25, 2019.
Prior Publication US 2020/0314121 A1, Oct. 1, 2020
Int. Cl. H04L 9/40 (2022.01); G06F 21/53 (2013.01)
CPC H04L 63/1416 (2013.01) [G06F 21/53 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors to perform the steps of:
receiving a request for resources that are one of web content and a cloud application from a user device;
determining the request requires isolation based on any of policy, category of the web content, type of the user device, and location of the user device, wherein app gating provides the capability to tag/detect endpoint and transparently redirect Software as a Service (SaaS) apps to isolation using a Security Assertion Markup Language (SAML) proxy, wherein the policy is configured to enforce tagging of the user device by generating and sending a cryptographically secure cookie to a native browser of the user device, thereby providing a mechanism to recognize the native browser for the determining;
in response to the request for resources being from the web content that requires isolation, creating an isolated session by rendering the web content associated with the request in a cloud based secure environment that is isolated from the user device and providing image content to the user device based on the web content rendered, the image content based on the web content rendered being graphics files including passive, safe pixels;
in response to the request for resources being the cloud application that requires isolation, creating an isolated session by isolating the cloud application in the cloud based secure environment and providing image content to the user device based on data from the cloud application, the image content based on the data from the cloud application being graphics files including passive, safe pixels; and
taking one or more snapshots at one of regular intervals or before a logout event of a user of cookies and the isolated session created, wherein the snapshots include user-related information and information associated with the isolated session environment, and wherein the snapshots are encrypted and stored for future use.