US 12,363,012 B2
Using device behavior knowledge across peers to remove commonalities and reduce telemetry collection
Andrea Di Pietro, Frejus (FR); Sukrit Dasgupta, Norfolk, MA (US); and Sofia Karygianni, Dubendorf (CH)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Feb. 8, 2023, as Appl. No. 18/107,258.
Prior Publication US 2024/0267308 A1, Aug. 8, 2024
Int. Cl. H04L 43/062 (2022.01); H04L 41/16 (2022.01); H04L 43/04 (2022.01)
CPC H04L 43/062 (2013.01) [H04L 41/16 (2013.01); H04L 43/04 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method comprising:
obtaining, by a central agent, device inventory data from a plurality of networks regarding endpoint devices in those networks;
receiving, at the central agent, a request for a behavioral model for a particular type of endpoint device;
selecting, by the central agent, one or more networks of the plurality of networks to export traffic data associated with endpoint devices of the particular type by determining whether a given network in the plurality of networks exporting the traffic data would violate an export policy associated with the given network that prohibits one or more types of traffic from being exported; and
configuring, by the central agent, one or more export agents at the one or more networks to export the traffic data, wherein the traffic data exported by the one or more export agents is used to train the behavioral model.