Method, apparatus and computer program product for a network firewall
AssigneeJuniper Networks, Inc.
InventorsKen Xie, Yan Ke, Yuming Mao
Life of this patent
Estimating the term…
Abstract
Systems and methods for network security including a firewall. One firewall includes a firewall engine. The firewall engine includes a first engine including a first set of rules for sorting incoming IP packets into initially allowed packets and initially denied packets. The firewall engine also includes a filter including a second set of rules for receiving and further sorting the initially denied packets into allowed packets and denied packets.
Claims24
An apparatus comprising:
- a firewall engine including:
- a first engine including a first set of rules for sorting incoming IP packets into initially allowed packets and initially denied packets;
- and
- a filter including a second set of rules for receiving and further sorting the initially denied packets into allowed packets and denied packets.
A computer software product, tangibly stored on a computer-readable medium, for providing a network security, comprising instructions operable to cause a programmable processor to:
- process incoming IP packets into initially allowed packets and initially denied packets;
- extract matching criteria from incoming IP packets;
- dynamically generate rules using the extracted matching criteria;
- and
- further process the initially denied packets using the dynamically-generated rules.
A method for providing network computer security, comprising:
- receiving incoming packets at a firewall;
- sorting the incoming packets into initially allowed packets and initially denied packets;
- and
- further sorting the initially denied packets into allowed and denied packets using rules.
A method for providing network computer security, comprising:
- receiving incoming IP packets at a firewall;
- sorting the incoming IP packets into initially allowed packets and initially denied packets using a set of fixed rules;
- extracting parameters from the incoming IP packets;
- using the extracted parameters to generate a set of dynamically-generated rules;
- and
- further sorting the initially denied packets into allowed and denied packets using the dynamically-generated rules.
An apparatus comprising:
- an ASIC including a firewall engine including:
- a first engine including a first set of rules for processing incoming IP packets into initially allowed packets and initially denied packets;
- and
- a filter including a second set of rules for receiving and further processing the initially denied packets into allowed packets and denied packets.
A method for providing network computer security, comprising:
- receiving incoming packets at a firewall;
- processing the incoming packets into initially allowed packets and initially denied packets;
- and
- further processing the initially denied packets into allowed and denied packets using rules.
Dependencies are inferred from the claim text.