Secure access service edge (SASE)

Patent metadata

Field	Value
Publication number	US-12519797-B2
Application number	US-202318302245-A
Country	US
Kind code	B2
Filing date	Apr 18, 2023
Priority date	Jun 13, 2022
Publication date	Jan 6, 2026
Grant date	Jan 6, 2026

Abstract

Novel tools and techniques are provided for implementing network service ordering and provisioning of secure access service edge (“SASE”) software packages. In various embodiments, a computing system may provide a user experience (“UX”) platform for a customer portal, the UX platform being accessible by a user via a user device over a first network(s); may provide, via the UX platform, options to configure, via the customer portal, one or more SASE-based network services among a plurality of network services provided by a service provider; and may autonomously orchestrate deployment and configuration of the one or more SASE-based network services via one or more customer premises equipment (“CPE”) that are associated with the user or to an entity with which the user is associated, over a second network(s), based at least in part on user selection of at least one option to configure the one or more SASE-based network services.

First claim

What is claimed is:

1 . A method, comprising:
providing, using a computing system, a user experience (“UX”) platform for a customer portal, the UX platform being accessible by a user via a user device over one or more first networks; providing, using the computing system and via the UX platform, one or more options to configure, via the customer portal, one or more secure access service edge (“SASE”)-based network services among a plurality of network services provided by a service provider, the one or more SASE-based network services collectively comprising a set of unified, cloud-based services that integrate software-defined wide area network (“SD-WAN”) functionalities with network service functionalities and network security functionalities; and autonomously orchestrating, using the computing system, deployment and configuration of the one or more SASE-based network services via one or more customer premises equipment (“CPE”) that are associated with the user or to an entity with which the user is associated, over one or more second networks, based at least in part on user selection of at least one option among the one or more options to configure the one or more SASE-based network services, wherein deployment and configuration of the one or more SASE-based network services comprises: prior to delivery and installation of a CPE among the one or more CPE at a customer premises, preconfiguring the one or more SASE-based network services with at least one configuration among a plurality of configurations of the one or more SASE-based network services and preconfiguring the CPE with the preconfigured one or more SASE-based network services; in response to the CPE being installed at the customer premises, autonomously establishing, using the CPE, a connection with a server over the one or more second networks; and in response to establishing the connection with the server, autonomously activating, using the CPE, the one or more SASE-based network services based at least in part on the at least one configuration with which the one or more SASE-based network services have been preconfigured, and wherein the one or more options to configure the one or more SASE-based network services comprise a plurality of sets of options, each set of options being displayed on a page among a plurality of pages within the customer portal, wherein selection of each set of options and input to advance to a next set of options cause configuration of the one or more SASE-based network services to be performed in real-time based on the set of options that are selected prior to advancement to the next set of options.

2 . The method of claim 1 , wherein the computing system comprises at least one of a web-based digital marketplace computing system, a portal-based digital marketplace computing system, a software application (“app”)-based digital marketplace computing system, a server computer, a customer interface server, a network service reservation and ordering platform server, a gateway controller, a network provisioning server, a cloud computing system, or a distributed computing system, wherein each of the one or more CPE are located at a customer premises, the customer premises comprising one of a residential customer premises, a business customer premises, a corporate customer premises, an enterprise customer premises, an education facility customer premises, a medical facility customer premises, or a governmental customer premises.

3 . The method of claim 1 , wherein at least one of the one or more second networks is the same network as at least one of the one or more first networks.

4 . The method of claim 1 , wherein the plurality of network services comprises at least one of the one or more SASE-based network services, a plurality of network service software applications (“apps”), one or more Internet services, one or more WAN services, one or more SD-WAN services, one or more network security services, one or more telephony services, one or more voice over Internet Protocol (“VoIP) services, or other network services, wherein the network service functionalities comprise at least one of WAN optimization functionalities, software-defined application-centric network control functionalities, data loss prevention (“DLP”) functionalities, application performance management (“APM”) functionalities, bandwidth aggregation functionalities, network as a service (“NaaS”) functionalities, global private network functionalities, software as a service (“SaaS”) functionalities, content distribution network (“CDN”) functionalities, or multi-cloud networking functionalities, wherein the network security functionalities comprise at least one of firewall as a service (“FWaaS”) functionalities, secure web gateway (“SWG”) functionalities, zero-trust network access (“ZTNA”) functionalities, anti-malware functionalities, intrusion detection functionalities, intrusion prevention functionalities, cloud access security broker (“CASB”) functionalities, remote browser isolation (“RBI”) functionalities, web application and application programming interface (“API”) protection (“WAAP”) functionalities, secure sockets layer (“SSL”) or transport layer security (“TLS”) inspection functionalities, or network-based threat detection functionalities.

5 . The method of claim 1 , wherein the user selection of the at least one option among the one or more options to configure the one or more SASE-based network services comprises user selection of one or more first options to preconfigure the one or more SASE-based network services with at least one configuration among a plurality of configurations of the one or more SASE-based network services and/or to preconfigure the one or more CPE with the preconfigured one or more SASE-based network services, each prior to delivery and/or installation of the one or more CPE at the customer premises.

6 . The method of claim 1 , wherein the user selection of the at least one option among the one or more options to configure the one or more SASE-based network services comprises user selection of one or more second options to configure the one or more SASE-based network services with at least one configuration among a plurality of configurations of the one or more SASE-based network services and/or to configure the one or more CPE with the one or more SASE-based network services, each after the one or more CPE have already been installed at one or more customer premises associated with the entity.

7 . The method of claim 1 , wherein the user selection of the at least one option among the one or more options to configure the one or more SASE-based network services comprises user selection of one of implementing the one or more SASE-based network services in a self-managed manner in which agents of the entity manage operation of the one or more SASE-based network services, implementing the one or more SASE-based network services in a co-managed manner in which agents of the service provider and agents of the entity co-manage operation of the one or more SASE-based network services, or implementing the one or more SASE-based network services in a pro-managed manner in which agents of the service provider manage operation of the one or more SASE-based network services.

8 . The method of claim 1 , further comprising:
providing, using the computing system and via the UX platform, one or more options for the user to manage SASE-based network services, the one or more options to manage SASE-based network services comprising at least one of: one or more options to change at least one of deployment, configuration, settings, location, or operation of at least one SASE-based network service among the one or more SASE-based network services; one or more options to provide, update, or cu

Assignees

• Level 3 Communications Llc

Inventors

• Smith Christopher D
• Sidhu Gurpreet S
• Wolner Darren N
• Robles Michael F
• Zeile Nanette B
• Johnson Mark Thomas
• Adler David Scott
• Ramach Mark Alan
• Dande Priyadarshini

Classifications

• H04L63/102 Primary

  Entity profiles · CPC title