US 2014/0181979 A1Published application

Content filtering of remote file-system access protocols

AssigneeFortinet, Inc.

InventorWilliam Jeffrey Crawford

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems for content filtering of remote file-system access protocols are provided. According to one embodiment, a remote file-system access protocol request issued by a client to a server is received at a network device logically interposed between the client and the server. The request is issued to the server by the network device. A single shared holding buffer, used for both read and write accesses to the file and used by multiple processes running on the client, is implemented by the network device for the file during a remote file-system access protocol session. Data being read from or written to the file as a result of the request is buffered into the buffer. Responsive to a predetermined event in relation to the remote file-system access protocol or the buffer, the existence or non-existence of malicious, dangerous or unauthorized content is determined by performing content filtering on the buffer.

Claims20

Dependent claims

A method comprising:

receiving, at a network device, logically interposed between a client and a server, a remote file-system access protocol request from the client, the remote file-system access protocol request representing a request to access a file associated with a share of the server;
issuing, by the network device, the remote file-system access protocol request to the server on behalf of the client;
implementing, by the network device, a single shared holding buffer for the file during a remote file-system access protocol session, wherein the single shared holding buffer is used for both read and write accesses to the file and is used for accesses to the file by a plurality of processes running on the client;
buffering, by the network device, into the single shared holding buffer data being read from or written to the file as a result of the remote file-system access protocol request;
and
responsive to a predetermined event in relation to the remote file-system access protocol or the single shared holding buffer, determining, by the network device, the existence or non-existence of malicious, dangerous or unauthorized content contained within the holding buffer by performing content filtering on the single shared holding buffer.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/194,751Filed 2 Mar 2014
Priority: 8 May 2007
Published: 26 Jun 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

H04L 63/145
Countermeasures against malicious traffic: the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
G06F 21/56
Detecting local intrusion or implementing counter-measures: computer malware detection or handling, e.g. anti-virus arrangements
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
H04L 63/0245
Filtering policies: filtering by information in the payload

Family

Application11/746,046Continuation · filed 8 May 2007
Application12/202,427Continuation · filed 1 Sep 2008
Application13/726,019Continuation · filed 22 Dec 2012
Application14/194,751Continuation
US 2008/0282337 A1Published application
US 2009/0006423 A1Published application
US 2013/0125238 A1Published application
US 8,347,373 B2Related patent
US 8,353,042 B2Related patent
US 8,671,450 B2Related patent
US 8,887,283 B2Related patent
US 2014/0181979 A1This patent

From the US filing history. Foreign family members aren’t listed.