×

Early policy evaluation of multiphase attributes in high-performance firewalls

  • US 9,100,366 B2
  • Filed: 09/13/2012
  • Issued: 08/04/2015
  • Est. Priority Date: 09/13/2012
  • Status: Active Grant
First Claim
Patent Images

1. A method comprising:

  • establishing a policy at a proxy device, the policy comprising a multiphase condition having a multiphase attribute of a multiphase transaction, wherein the multiphase attribute comprises an attribute that becomes known at one or more of a plurality of phases of the multiphase transaction, and the multiphase condition comprises a condition that is met at one or more of the plurality of phases;

    establishing phase specific policies for each phase of the plurality of phases in which the multiphase attribute becomes known;

    evaluating the multiphase transaction at the proxy device according to the phase specific policies at each phase of the plurality of phases until a policy decision of the policy is determined;

    wherein establishing phase specific policies comprises establishing phase specific conditions each evaluating a phase of the transaction in which the multiphase attribute becomes known, andwherein establishing the policy comprises establishing the policy including a condition having a single phase attribute, and wherein establishing the phase specific policies comprises including the single-phase condition in each phase specific policy and ordering the phase specific conditions, the multiphase condition, and the single-phase condition according to an order of the phases in which the single phase attribute and the multiphase attribute become known.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×