Cisco Patent Grants

Cooling fan assembly with air guider

Granted: January 21, 2025
Patent Number: 12207435
A fan assembly comprises: a fan having a fan intake and a fan exit downstream from the fan intake, wherein the fan is configured to draw air into the fan intake and propel the air downstream through the fan exit; a housing having a housing inlet coupled to the fan exit and a housing outlet downstream from the housing inlet; and an air guider, mounted inside the housing adjacent to the housing inlet, having a conical shape with a base adjacent to the housing inlet and an apex opposite the…

Manufacturer usage description (MUD) extensions for secure access service edge (SASE) services

Granted: January 21, 2025
Patent Number: 12206646
Techniques for associating manufacturer usage description (MUD) security profiles for Internet-of-Things (IoT) device(s) with secure access service edge (SASE) solutions, providing for automated and scalable integration of IoT devices with SASE frameworks. A MUD controller may utilize a MUD uniform resource identifier (URI) emitted by an IoT device to fetch an associated MUD file from a MUD file server associated with a manufacturer of the IoT device. The MUD controller may determine…

Path signatures for data flows

Granted: January 21, 2025
Patent Number: 12206581
This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is…

Dynamic security policy for sharing content in collaborative applications

Granted: January 21, 2025
Patent Number: 12204659
A method, computer system, and computer program product are provided for applying a dynamic security policy to shared content in collaborative applications. A selection of one or more content items is received for sharing in a communication session. A security policy is queried using a key that is associated with each of the one or more content items to determine a security policy for each of the one or more content items. A plurality of users participating in the communication session…

Multiple input neural networks for detecting fraud

Granted: January 21, 2025
Patent Number: 12204619
Embodiments of the present invention set forth a technique for predicting fraud based on multiple inputs including user behavior biometric data along with one or more other parameters associated with the user. The technique includes receiving cursor movement data generated via a client device. The technique further includes generating a image based on the cursor movement data. The technique further includes receiving client parameters generated via the client device. The technique…

Optimizing IPSec for hierarchical SD-WAN

Granted: January 14, 2025
Patent Number: 12199868
According to some embodiments, a method is performed by a software defined wide area network (SD-WAN) edge router in a hierarchical SD-WAN network comprising a plurality of edge routers and a plurality of border routers. The method comprises: originating a SD-WAN system route for advertising reachability to the edge router, the system route comprising an encryption key associated with the edge router; and transmitting the system route to one or more SD-WAN border routers. The method may…

Liquid cooling distribution in a modular electronic system

Granted: January 14, 2025
Patent Number: 12200906
A network communications device includes a chassis, a plurality of modules removably inserted into a plurality of slots in the chassis. A coolant is delivered to a first group of the plurality of modules with a first flow control valve in a first cooling loop and the coolant is delivered to a second group of the plurality of modules with a second flow control valve in a second cooling loop. The network communication device further includes a plurality of sensors for monitoring a…

Secure access app connectors

Granted: January 14, 2025
Patent Number: 12200068
Techniques for creating in/out App Connectors for secure access solutions without the need for STUN, TURN, and/or a long-lived control plane component. The techniques may include, among other things, establishing, by an App Connector associated with a workload hosted by an enterprise network, a pool of idle sessions between the App Connector and a termination node associated with the enterprise network. The techniques may also include determining, by the App Connector, that a first idle…

Confidence scoring for detectors used to detect anomalous behavior

Granted: January 14, 2025
Patent Number: 12199996
A computer-implemented method of determining whether to configure a detection comprised within a query is disclosed. The method includes analyzing a query to determine clauses within the query that identify logs relevant to the detection comprised within the query. The method further includes determining a statistical distribution for modeling a likely hit rate of the detection. Additionally, the method includes updating the statistical distribution with information associated with an…

Queue protection using a shared global memory reserve

Granted: January 14, 2025
Patent Number: 12199886
The subject technology relates to the management of a shared buffer memory in a network switch. Systems, methods, and machine readable media are provided for receiving a data packet at a first network queue from among a plurality of network queues, determining if a fill level of a queue in a shared buffer of the network switch exceeds a dynamic queue threshold, and in an event that the fill level of the shared buffer exceeds the dynamic queue threshold, determining if a fill level of the…

Method and apparatus for efficient synchronization of search heads in a cluster using digests

Granted: January 14, 2025
Patent Number: 12197394
Embodiments of the present disclosure provide techniques for efficiently and accurately performing propagation of search-head specific configuration customizations across multiple individual configuration files of search heads of a cluster for a consistent user experience. The cluster of search heads may be synchronized such that the search heads operate to receive the configuration or knowledge object customizations from one or more clients from a central or lead search head. To reduce…

Encoding end-to-end tenant reachability information in border gateway protocol (BGP) communities

Granted: January 14, 2025
Patent Number: 12199866
Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an…

Data network duplicate flow detection in hardware with line rate throughput

Granted: January 14, 2025
Patent Number: 12199859
Techniques for detecting duplicate data flows. A data packet of a data flow is received by computer hardware the data packet having a first five tuple, an ingress interface and a VLAN tag. Data is sent to a central processing unit. The central processing unit installs policy tiles into a policy tile database of the computer hardware, the policy tiles including the first five tuple, the first ingress interface and the first VLAN tag. A second data packet is received and compared with the…

Anomaly detection of model performance in an MLOps platform

Granted: January 14, 2025
Patent Number: 12199847
In one embodiment, a service tracks performance of a machine learning model over time. The machine learning model is used to monitor one or more computer networks based on data collected from the one or more computer networks. The service also tracks performance metrics associated with training of the machine learning model. The service determines that a degradation of the performance of the machine learning model is anomalous, based on the tracked performance of the machine learning…

Automatic generation of data analysis queries

Granted: January 14, 2025
Patent Number: 12198021
Disclosed herein is a computer-implemented tool that facilitates data analysis by use of machine learning (ML) techniques. The tool cooperates with a data intake and query system and provides a graphical user interface (GUI) that enables a user to train and apply a variety of different ML models on user-selected datasets of stored machine data. The tool can provide active guidance to the user, to help the user choose data analysis paths that are likely to produce useful results and to…

Ingest preview of events in a network computing environment

Granted: January 14, 2025
Patent Number: 12197968
A computing device receives an ingest preview request to preview events to be stored by at least one indexer. Responsive to the ingest preview request, the computing device sends a subscription request to the forwarders. The forwarders receive the subscription request and intercept the events that are being sent to at least one of the indexers. The forwarders then clone matching events to the subscription request and responds to the computing device with the matching events. When the…

Audio watermarking to prevent meeting howl

Granted: January 14, 2025
Patent Number: 12197810
Presented herein are techniques in which a first device connects to a communication session in which a plurality of devices communicates. The plurality of devices includes the first device and a second device. The first device outputs first audio that includes a first audio watermark associated with the communication session and the second device outputs second audio that includes a second audio watermark associated with the communication session. The first device detects the second…

Integration of cloud-based and non-cloud-based data in a data intake and query system

Granted: January 14, 2025
Patent Number: 12197442
A software module ingests data into a data intake and query system. At least a portion of the data is cloud data. The software module includes an event type definition that specifies a type of data to be ingested by the software module, a first tag that associates ingested data of the event type with a data model, and a second tag that designates ingested data of the event type as cloud data. The ingested data is stored in a data repository, and subsequently a search query that includes…

Distributed alert and suppression management in a cluster computing system

Granted: January 14, 2025
Patent Number: 12197431
A first processing node of a cluster of processing nodes issues a first alert when first event data satisfies a trigger condition, and sends, to an alert data store external to the cluster, a first alert record of the first alert and suppression information based at least in part on the first alert. A second processing node of the cluster determines that second event data satisfies the trigger condition, obtains, from the alert data store, the suppression information indicating that an…

Using persistent memory to enable restartability of bulk load transactions in cloud databases

Granted: January 14, 2025
Patent Number: 12197396
Systems, methods, and computer-readable media for managing storing of data in a data storage system using a client tag. In some examples, a first portion of a data load as part of a transaction and a client identifier that uniquely identifies a client is received from the client at a data storage system. The transaction can be tagged with a client tag including the client identifier and the first portion of the data load can be stored in storage at the data storage system. A first log…