US 12,238,010 B2
Application precedence based traffic policy enforcement
Daphne Sang, Los Altos, CA (US); and Harish Patil, Fremont, CA (US)
Assigned to Palo Alto Networks, Inc., Santa Clara, CA (US)
Filed by Palo Alto Networks, Inc., Santa Clara, CA (US)
Filed on Mar. 29, 2024, as Appl. No. 18/621,429.
Application 18/621,429 is a continuation of application No. 17/937,792, filed on Oct. 4, 2022, granted, now 11,973,690.
Prior Publication US 2024/0291764 A1, Aug. 29, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 47/2425 (2022.01); H04L 47/2475 (2022.01); H04L 47/2483 (2022.01)
CPC H04L 47/2433 (2013.01) [H04L 47/2475 (2013.01); H04L 47/2483 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
in a control plane,
inspecting a first flow of network traffic to identify applications indicated in the network traffic;
for each of a plurality of applications identified based on inspecting, determining one of a plurality of priority values previously assigned to the identified application;
in a data plane,
selecting policies based, at least in part, on identifiers of the plurality of applications; and
enforcing the selected policies on network traffic corresponding to the flow according to precedence as represented by the determined priority values.