Multi-vendor web security control integration and management platform
A computer-implemented method of providing web security control integration in a system that utilizes at least one vendor proxy service for securely accessing the Internet. The method comprises receiving an instruction to update a web control policy or exception, generating a web control and exception update request, using a vendor agnostic API, wherein the web control and exception update request includes policy objects and content data, delivering the web control and exception data to a policy sync worker associated with a particular vendor proxy service, converting the web control and exception update request, via the policy sync worker into a format suited to the particular vendor proxy service, and delivering the converted web control and exception update request to the particular vendor proxy service associated with the policy sync worker to update the web control policy at the particular vendor proxy service.
1 . A computer-implemented method of processing a request for web security control that qualifies as an exception, comprising:
receiving a request for a web security control or exception at a computing device connected to a network;
processing at the device whether to allow the request, block the request, or treat the request as an exception, wherein the request enters a queue which is managed for human review;
when it is determined to treat the request as an exception:
delivering the request over the network to a portal for automating web exceptions (PAW) coupled to the network;
notifying approvers of the request over the network via the PAW; and
transmitting the request to a RESTful application program interface (Proxy API) for delivery in a suitable form for updating a vendor proxy service control policy,
wherein the transmitted request is configured for execution, upon receipt, in a particular vendor proxy service to update, without human interaction, the vendor proxy service control policy maintained by the vendor proxy service.
2 . The computer-implemented method of claim 1 , further comprising storing the request as executable code in a repository coupled to the PAW, after delivering the request to the PAW.
3 . The computer-implemented method of claim 1 , further comprising:
when it is determined to block the request, delivering the request via the network to the RESTful application program interface (Proxy API); and
storing the blocked request at the Proxy API.
4 . The computer-implemented method of claim 1 , further comprising:
generating a ticket when it is determined to allow the request; and
delivering the ticket to the RESTful application program interface (Proxy API) for delivery in a suitable form for updating a vendor proxy service control policy.
5 . A computer-implemented method for performing policy syncs with multiple vendor proxy services comprising:
determining a category of each of the multiple the vendor proxy services, wherein the category is one of: hosted externally (“category 1”), have an on-premises API but otherwise hosted externally (“category 2”), and hosted on-premises (“category 3”);
when it is determined that a vendor proxy service is of category 1 or category 2, for each vendor proxy service of these categories:
initiating a sync to the external vendor proxy service through a policy sync worker associated with the vendor proxy service;
transmitting a call to the RESTful endpoint of a RESTful application program interface (“Proxy API”) requesting web exception and web control policy data from the Proxy API;
downloading web exception or web control policy data from the Proxy API;
parsing the web exception or web control policy data downloaded from the Proxy API;
extracting data fields from the parsed web exception or web control policy data;
preparing a JSON payload including the extracted data fields for updating a web exception or web control policy; and
sending an HTTP POST request to the vendor proxy service associated with the policy sync worker to update the web exception or web control policy at the vendor proxy service.
6 . The computer-implemented method of claim 5 , wherein the extracted data fields include a URL of a resource for which the web exception or web control policy is requested.
7 . The computer-implemented method of claim 5 , further comprising when it is determined that a vendor proxy service is of the multiple vendor proxy services are of category 3, for each vendor proxy service of category 3:
initiating a sync to a RESTful application program interface (“Proxy API”);
calling a dedicated policy endpoint stored at the Proxy API particular to the vendor proxy service;
pre-converting data stored at the endpoint into a configuration format suitable for the vendor proxy service; and
downloading policy data from the Proxy API using a policy sync worker associated with the vendor proxy service to update the web exception or web control policy at the vendor proxy service,
wherein the updates to the web exception or web control policy at vendor proxy services of category 3 occurs synchronously with the updates to the web exception or web control policy at the vendor proxy services of category 1 or category 2.