Methods and apparatus for a computer network firewall with proxy reflection

A method for providing a firewall service in a computer network, comprising the steps of:

• receiving a request, at a firewall, for a session from a source to a destination;
• ascertaining whether granting the request by the firewall requires a service which can be provided by a remote server;
• and
• when granting the request by the firewall requires a service which can be provided by a remote server, redirecting one or more packets associated with said request to said remote server so that the service can be provided by said remote server.

A method for providing a firewall service in a computer network, comprising the steps of:

• receiving a request, at a firewall, for a session from a source to a destination;
• ascertaining whether granting the request by the firewall requires a service which can be fulfilled by a remote proxy;
• and
• when granting the request by the firewall requires a service which can be fulfilled by a remote proxy, redirecting one or more packets associated with said request to said remote proxy.

A method for providing a firewall service in a computer network, comprising the steps of:

• receiving a request, at a firewall, for a session from a source to a destination;
• ascertaining whether granting the request by the firewall requires a service which can be performed by a remote proxy;
• and
• when granting the request by the firewall requires a service which can be performed by a remote proxy, setting up a dynamic rule to enable an appearance of a direct connection from the source to the destination.

A computer system for providing a firewall service in a computer network, comprising:

• means for obtaining a request for a session from a source to a destination;
• means for ascertaining whether the request requires a service which can be performed by a remote server;
• and
• means for redirecting one or more packets associated with the request to the remote server so that the service can be performed by the remote server.

A computer system for providing a firewall service in a computer network, comprising a processor which is operable to:

• obtain a request for a session from a source to a destination;
• ascertain whether the request requires a service which can be performed by a remote server;
• and
• when the request requires a service which can be performed by a remote server, redirect one or more packets associated with the request to the remote server so that the service can be performed by the remote server.

A method for providing a firewall service in a computer network, comprising the steps of:

• receiving a request, at a firewall, for a session from a source to a destination;
• ascertaining whether granting the request by the firewall requires a service which can be provided by a remote proxy;
• and
• when granting the request by the firewall requires a service which can be provided by a remote proxy, reflecting one or more packets associated with said request to said remote proxy so that the service can be performed by the remote proxy.

A method for providing a firewall service in a computer network, comprising the steps of:

• obtaining a request for a session from a source to a destination;
• ascertaining whether the request requires a service which can be met by a remote server;
• and
• reflecting one or more packets associated with the request to the remote server so that the service can be performed by the remote server.