Back to results
US 2013/0097658 A1Published application
System and method for redirected firewall discovery in a network environment
AssigneeMcAfee, Inc.
InventorsGeoffrey Cooper, Michael W. Green, John Richard Guzik
Life of this patent
Estimating the term…
Abstract
A method is provided in one example embodiment that includes receiving metadata from a host over a metadata channel. The metadata may be correlated with a network flow and a network policy may be applied to the connection. In other embodiments, a network flow may be received from a host without metadata associated with the flow, and a discovery redirect may be sent to the host. Metadata may then be received and correlated with the flow to identify a network policy action to apply to the flow.
Claims23
A method, comprising:
- receiving metadata from a host over a metadata channel;
- intercepting a network flow from the host;
- and
- correlating the metadata with the network flow to apply a network policy to the network flow.
1 more element
A method, comprising:
- intercepting a network flow from a source node;
- sending a discovery redirect to the source node;
- receiving metadata associated with the network flow;
- and
- correlating the metadata with the network flow to apply a network policy to the network flow.
2 more elements
A method, comprising:
- intercepting a network flow from a source node to a destination node;
- identifying a firewall for managing a route to the destination node;
- sending metadata associated with the network flow to the firewall;
- and
- releasing the network flow.
2 more elements
Dependencies are inferred from the claim text.