Session setup in network applications

A process performed in a device configured to monitor and control incoming and outgoing network traffic, the process comprising:

• determining whether a session table contains a network session pertaining to a first packet received by the device;
• determining whether an access control list contains an access control rule for processing of the first packet when it is determined that the session table does not contain a network session pertaining to the first packet;
• creating a first unique identifier associated with the first packet in response to determining that the access control list contains an access control rule for processing of the first packet;
• and
• adding a first network session to the session table associated with the first packet while not permitting any other packet associated with the first unique identifier to be processed by a session manager until after the network session has been added to the session table.