System and method for network edge data protection

A computer program product having a computer readable medium having computer program logic recorded thereon, which when executed by a machine, causes the machine to perform operations for providing protection against malicious code, said computer program product comprising:

• code for analyzing malicious code present in information communication traffic between an originator of an information communication of said communication traffic and an intended recipient of said information communication;
• code for a steering said information communication between interfaces associated with said information communication originator and said intended recipient and providing a translate function which detours at least a portion of said information communication to said code for analyzing malicious code and which renders said code for analyzing malicious code invisible to said information communication originator and said intended recipient;
• and
• code for throttling communications by receiving information with respect to information communication and determining if said information communication is to be passed by said interfaces.

A method for providing protection against malicious code, said method comprising:

• intercepting packets in an information communication traffic pattern;
• steering said packets between interfaces associated with an information communication originator and said intended recipient, said steering providing detouring of at least a portion of said packets to a malicious code analyzer;
• analyzing said at least a portion of said packets by said malicious code analyzer before releasing said at least a portion of said packets back into said traffic pattern;
• and
• throttling communications by receiving information with respect to said packets and determining if said packets are to be passed in said traffic pattern.

A system for providing protection against malicious code, said system comprising:

• a steering module for directing packets between a first interface and a second interface of said system, wherein said steering module provides a translate function that monitors each packet provided to said first interface and said second interface for packets to be provided malicious code analysis and directs at least some of said packets to a malicious code analyzer;
• said malicious code analyzer coupled to said steering module for receiving packets which are not addressed for receipt by said malicious code analyzer but which are directed to said malicious code analyzer by said steering module and for providing packets analyzed by said malicious code analyzer to said steering module, wherein said malicious code analyzer provides a malicious code remediation function;
• and
• a communications throttle coupled to said steering module for receiving information with respect to packets which are not addressed for receipt by said communications throttle but which information with respect thereto is directed to said communications throttle by said steering module and for determining if said packets are to be passed by said system.