Loading patent…
AssigneeJuniper Networks, Inc.
InventorsKowsik Guruswamy, Siyang Yang
Estimating the term…
A network device is capable of recognizing and blocking network attacks associated with packet flows regardless of whether the packet flows are encapsulated within network tunnels. For example, the network device includes a filter module that receives packets associated with a network tunnel from an ingress device to an egress device. The filter module applies heuristics to determine whether the packets encapsulate encrypted data units. If the data units are not encrypted, the filter module extracts the data units and generates temporary packets for use within the network device. An attack detection engine within the device analyzes the temporary packets to detect any network attacks carried by the encapsulated data units. A forwarding component selectively forwards the packets to the egress device based on whether any network attacks are detected.
A method comprising:
A network device comprising:
A non-transitory computer-readable medium comprising instructions that cause a programmable processor within an intermediate network device to:
Dependencies are inferred from the claim text.