Cloud policy enforcement based on network trust

1. A cloud-based system comprising:

at least one computer processor;

a plurality of enforcement nodes communicatively coupled to one another, to a user, and to the Internet and one or more cloud applications;

a central authority communicatively coupled to the plurality of enforcement nodes; and

memory having computer program instructions, the computer program instructions being executable by the at least one computer processor communicatively coupled to a network, the plurality of enforcement nodes, and the central authority, wherein the central authority is configured to

obtain trusted network rules for a plurality of networks, wherein the trusted network rules include a network trust level for each of the plurality of networks,

obtain policy configurations for each of the trusted network rules, wherein the networks are provided with specific policy configurations based on the associated trust level, and wherein the policy configurations define configurations for a cloud-based system to use with a user device based on a corresponding network where the user device is connected, and

wherein each of the plurality of enforcement nodes is configured to

receive a request from the user device for a cloud service,

responsive to receiving the request, communicate with the user device and determine which specific network of the plurality of networks the user device is utilizing to access the cloud service associated with the cloud-based system, wherein the specific network has one of a plurality of trust levels, or is untrusted, and

apply the specific policy configurations in the cloud-based system for the user device based on the trust level of the specific network the user device is determined to be utilizing to access the cloud-based system.

2. The cloud-based system of claim 1 , wherein the central authority is further configured to obtain forwarding policies for each of the plurality of networks, wherein the forwarding policies are based on a location or the trust level of the networks, and wherein an enforcement node is further configured to provide the forwarding policies to a connector application executed on the user device for the connector application to enforce.

3. The cloud-based system of claim 2 , wherein the policy configurations for each of the trusted network rules define the configurations in the cloud-based system and the forwarding policies for each of the plurality of networks define how traffic is forwarded by the user device to the cloud-based system.

4. The cloud-based system of claim 2 , wherein a same forwarding policy is used for at least two of the plurality of networks.

5. The cloud-based system of claim 1 , wherein the network is a home Wi-Fi network with an associated trust level, and wherein a connector application executing on the user device is adapted to identify the network and associated trust level and automatically apply the specific policy configurations on traffic between the user device and the cloud-based system based on the network and associated trust level.

6. The cloud-based system of claim 1 , wherein the configurations include content filtering through the cloud-based system.

7. The cloud-based system of claim 1 , wherein the configurations include Data Loss Prevention (DLP) monitoring through the cloud-based system.

8. The cloud-based system of claim 1 , wherein the configurations include Cloud Access Security Broker (CASB) monitoring through the cloud-based system.

9. A method comprising:

obtaining trusted network rules for a plurality of networks, wherein the trusted network rules include a network trust level for each of the plurality of networks;

obtaining policy configurations for each of the trusted network rules, wherein the networks are provided with specific policy configurations based on the associated trust level, and wherein the policy configurations define configurations for a cloud-based system to use with a user device based on a corresponding network where the user device is connected;

receiving a request from the user device for a cloud service,

responsive to receiving the request, communicating with the user device and determining which specific network of the plurality of networks the user device is utilizing to access the cloud service associated with the cloud-based system, wherein the specific network has one of a plurality of trust levels, or is untrusted; and

applying the specific policy configurations in the cloud-based system for the user device based on the trust level of the specific network the user device is determined to be utilizing to access the cloud-based system.

10. The method of claim 9 , further comprising

obtaining forwarding policies for each of the plurality of networks, wherein the forwarding policies are based on a location or the trust level of the networks; and

providing the forwarding policies to a connector application executed on the user device for the connector application to enforce.

11. The method of claim 10 , wherein the policy configurations for each of the trusted network rules define the configurations in the cloud-based system and the forwarding policies for each of the plurality of networks define how traffic is forwarded by the user device to the cloud-based system.

12. The method of claim 10 , wherein a same forwarding policy is used for at least two of the plurality of networks.

13. The method of claim 9 , wherein the network is a home Wi-Fi network with an associated trust level, and wherein the determining is performed by a connector application on the user device, and wherein the connector application is adapted to automatically apply the specific policy configurations on traffic between the user device and the cloud-based system based on the network and associated trust level.

14. The method of claim 9 , wherein the configurations include content filtering through the cloud-based system.

15. The method of claim 9 , wherein the configurations include Data Loss Prevention (DLP) monitoring through the cloud-based system.

16. The method of claim 9 , wherein the configurations include Cloud Access Security Broker (CASB) monitoring through the cloud-based system.

17. A non-transitory computer-readable storage medium having computer-readable code stored thereon for programming a cloud-based system to perform steps of:

obtaining trusted network rules for a plurality of networks, wherein the trusted network rules include a network trust level for each of the plurality of networks;

obtaining policy configurations for each of the trusted network rules, wherein the networks are provided with specific policy configurations based on the associated trust level, and wherein the policy configurations define configurations for a cloud-based system to use with a user device based on a corresponding network where the user device is connected;

receiving a request from the user device for a cloud service,

responsive to receiving the request, communicating with the user device and determining which specific network of the plurality of networks the user device is utilizing to access the cloud service associated with the cloud-based system, wherein the specific network has one of a plurality of trust levels, or is untrusted; and

applying the specific policy configurations in the cloud-based system for the user device based on the trust level of the specific network the user device is determined to be utilizing to access the cloud-based system.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the steps further include

obtaining forwarding policies for each of the plurality of networks, wherein the forwarding policies are based on a location or the trust level of the networks; and

providing the forwarding policies to a connector application executed on the user device for the connector application to enforce.

19. The non-transitory computer-readable storage medium of claim 18 , wherein the policy configurations for each of the trusted network rules define the configurations in the cloud-based system and the forwarding policies for each of the plurality of networks define how traffic is forwarded by the user device to the cloud-based system.

20. The non-transitory computer-readable storage medium of claim 18 , wherein a same forwarding policy is used for at least two of the plurality of networks.