US 12,316,608 B2
Validation of ZTNA configuration for a multi-tenant proxy environment
Robert Paul Andrews, Plugerville, TX (US); Amit Katyal, Bangalore (IN); and Thiyagu Rajendran, Bangalore (IN)
Assigned to Sophos Limited, Abingdon (GB)
Filed by Sophos Limited, Abingdon (GB)
Filed on Dec. 28, 2022, as Appl. No. 18/089,946.
Application 18/089,946 is a continuation of application No. PCT/US2022/054075, filed on Dec. 27, 2022.
Claims priority of application No. 202211058975 (IN), filed on Oct. 15, 2022.
Prior Publication US 2024/0126868 A1, Apr. 18, 2024
Int. Cl. H04L 9/40 (2022.01); G06F 21/53 (2013.01); G06F 21/64 (2013.01); H04L 41/12 (2022.01); H04L 61/3015 (2022.01); H04L 67/1008 (2022.01); H04L 67/1036 (2022.01)
CPC H04L 63/0281 (2013.01) [G06F 21/53 (2013.01); G06F 21/64 (2013.01); H04L 41/12 (2013.01); H04L 61/302 (2013.01); H04L 63/0236 (2013.01); H04L 63/029 (2013.01); H04L 63/0823 (2013.01); H04L 63/083 (2013.01); H04L 63/0884 (2013.01); H04L 63/1425 (2013.01); H04L 63/20 (2013.01); H04L 67/1008 (2013.01); H04L 67/1036 (2013.01); G06F 2221/033 (2013.01); H04L 63/0272 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer program product comprising computer executable code embodied in one or more computing devices that, when executing on one or more computing devices, causes the one or more computing devices to perform the steps of:
configuring a service proxy on a cloud computing platform to provide zero trust network access to an application hosted on a customer premises by providing configuration information for the service proxy including at least a fully qualified domain name for the application and a digitally signed certificate for the application;
launching a first instance of the service proxy in a sandbox environment;
loading validated configuration information into the first instance of the service proxy for one or more other applications previously validated in the sandbox environment;
loading the configuration information for the application into the first instance of the service proxy;
testing the first instance of the service proxy for proper operation in the sandbox environment, wherein testing includes at least confirming that the first instance of the service proxy is executing and responsive, and that the first instance of the service proxy correctly responds to a request for the application; and
in response to validating proper operation of the first instance of the service proxy in the sandbox environment, loading the configuration information for the application into a second instance of the service proxy executing on the cloud computing platform and coupled to a public network.