In-line scanning of network data in an asymmetric routing environment
AssigneeTrend Micro Incorporated
InventorsChih-Chieh Chou, Tsung-Lin Yu
Life of this patent
Estimating the term…
Abstract
In one embodiment, network data exchanged between a client computer and a remote server computer are scanned for computer viruses at a first network security computer. The first network security computer creates connection information about the connection between the client computer and the server computer, and registers that connection information with a second network security computer that may receive network data transmitted in the connection. This allows the second network security computer to forward to the first network security computer network data transmitted in the connection even when the first and second network security computers are configured for asymmetric routing.
Claims7
A method of in-line scanning network data in asymmetric routing environments, the method comprising:
- receiving a first set of data packets in a first security computer, the first set of data packets being transmitted as part of a connection between a client computer and a server computer, the first set of data packets being originated by the client computer in a computer network;
- in the first security computer, scanning the first set of data packets for computer viruses;
- registering a connection tracking information to a second security computer, the connection tracking information relating to the connection between the client computer and the server computer, the connection tracking information being registered by the first security computer to the second security computer;
- forwarding the first set of data packets from the first security computer to a computer outside the computer network;
- receiving in the second security computer a second set of data packets responsive to the first set of data packets;
- and
- in the second security computer, consulting the connection tracking information to identify the second set of data packets as being transmitted in the connection between the client computer and the server computer;
- and
- forwarding the second set of data packets from the second security computer to the first security computer.
Dependencies are inferred from the claim text.