Granted Patent B2

US 12,634,282 · App. 18/389,540 · Granted May 19, 2026

Inventors: Madhusudhan Gopalappa (San Jose, CA); Tengda Shi (San Jose, CA); Xin Yao (San Jose, CA); Xun Zhou (Cupertino, CA)

Assignee: Palo Alto Networks, Inc.

H04L63/0876H04L63/0236H04L63/0272

Abstract

Claims (50)

1 . A system comprising:

a processor configured to:

receive, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment, comprising to:

register the serial number in a data store associated with the portal; and

add the IP address associated with the new satellite to an allow list in the data store associated with the portal, wherein the allow list corresponds with output of a machine learning model, wherein the machine learning model is trained using a machine learning technique;

receive, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and

authenticate the new satellite at the portal using the serial number and the IP address associated with the new satellite, comprising to:

determine that the serial number is registered;

determine that the IP address associated with the new satellite is present in the allow list; and

in response to a determination that the serial number is registered and the IP address associated with the new satellite is present in the allow list, determine that the new satellite has been authenticated; and

a memory coupled to the processor and configured to provide the processor with instructions.

2 . The system of claim 1 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel.

3 . The system of claim 1 , further comprising:

sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite.

4 . The system of claim 1 , further comprising:

performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt.

5 . The system of claim 1 , further comprising:

performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time.

6 . The system of claim 1 , further comprising:

sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and

connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment.

7 . A method comprising:

receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment, comprising:

registering the serial number in a data store associated with the portal; and

adding the IP address associated with the new satellite to an allow list in the data store associated with the portal, wherein the allow list corresponds with output of a machine learning model, wherein the machine learning model is trained using a machine learning technique;

receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and

authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite, comprising:

determining that the serial number is registered;

determining that the IP address associated with the new satellite is present in the allow list; and

in response to a determination that the serial number is registered and the IP address associated with the new satellite is present in the allow list, determining that the new satellite has been authenticated.

8 . The method of claim 7 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel.

9 . The method of claim 7 , further comprising:

sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite.

10 . The method of claim 7 , further comprising:

performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt.

11 . The method of claim 7 , further comprising:

performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time.

12 . The method of claim 7 , further comprising:

sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and

connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment.

13 . A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:

receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment, comprising:

registering the serial number in a data store associated with the portal; and

adding the IP address associated with the new satellite to an allow list in the data store associated with the portal, wherein the allow list corresponds with output of a machine learning model, wherein the machine learning model is trained using a machine learning technique;

receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and

authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite, comprising:

determining that the serial number is registered;

determining that the IP address associated with the new satellite is present in the allow list; and

in response to a determination that the serial number is registered and the IP address associated with the new satellite is present in the allow list, determining that the new satellite has been authenticated.

14 . The computer program product of claim 13 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel.

Assignments (1)

Continuity (1)

References Cited (81)