US 12,218,977 B2
Managing admission of unrecognized devices onto an enterprise network
John Edward Tyrone Shaw, Oxford (GB); Ross McKerchar, Bristol (GB); Moritz Daniel Grimm, Bruchsal (DE); Jan Karl Heinrich Weber, Karlsruhe (DE); Shail R. Talati, Santa Clara, CA (US); Kenneth D. Ray, Seattle, WA (US); and Andrew J. Thomas, Oxfordshire (GB)
Assigned to Sophos Limited, Abingdon (GB)
Filed by Sophos Limited, Abingdon (GB)
Filed on Apr. 15, 2022, as Appl. No. 17/721,714.
Application 17/721,714 is a continuation of application No. 15/885,347, filed on Jan. 31, 2018, granted, now 11,310,275.
Prior Publication US 2022/0286481 A1, Sep. 8, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04W 12/79 (2021.01)
CPC H04L 63/20 (2013.01) [H04L 63/0281 (2013.01); H04L 63/029 (2013.01); H04L 63/0876 (2013.01); H04L 63/1416 (2013.01); H04L 63/1433 (2013.01); H04W 12/79 (2021.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
detecting a new device on an enterprise network managed by a threat management facility;
determining, with the threat management facility, that the new device fails to satisfy a heartbeat requirement for the enterprise network;
receiving information from the new device at a portal for the enterprise network;
determining, based on the information that:
the new device includes a user interface, and
that the new device is manageable by the threat management facility by delivery of a local security agent to the new device;
directing the new device to a landing page of the portal configured to manage admission of unrecognized devices onto the enterprise network by interactively guiding a user of the new device through a network entry procedure in the user interface, wherein the network entry procedure includes an authentication by an authorized user of the enterprise network and the delivery of the local security agent to satisfy the heartbeat requirement; and
during the network entry procedure, delivering the local security agent to the new device for installation on the new device, wherein the local security agent is configured to provide, following the authentication by the authorized user of the enterprise network, a heartbeat from the new device to the threat management facility satisfying the heartbeat requirement for the enterprise network.