公开(公告)号：EP2936375B1

公开(公告)日：2019-11-06

申请号：EP13866110.3

申请日：2013-12-12

申请人： McAfee, LLC

发明人： HUNT, Simon ,  LIEBMANN, Nicholas ,  GARTSIDE, Paul N. ,  BISHOP, Mike ,  STECHER, Martin

IPC分类号： H04L12/58

公开(公告)号：EP2764660B1

公开(公告)日：2018-12-05

申请号：EP12838186.0

申请日：2012-10-04

申请人： McAfee, LLC

发明人： LIEBMANN, Nicholas ,  TIDDY, Raoul ,  BISHOP, Mike

IPC分类号： H04L12/22 ,  H04L29/06 ,  H04L12/66 ,  H04L12/58

CPC分类号： H04L63/0263 ,  H04L12/66 ,  H04L51/12 ,  H04L63/02 ,  H04L63/0236 ,  H04L63/1416 ,  H04L63/1441 ,  H04L63/1458 ,  H04L63/1483

摘要： Disclosed are systems and methods to perform coordinated blocking of source addresses, such as an Internet Protocol (IP) addresses, across a plurality of network appliances (e.g., gateways). In one disclosed embodiment the method and system temporarily alter a configuration of one or more network appliances (based on user defined configuration parameters) to allow communication from a “blocked” IP address for a period of time. A network appliance can then “receive” an email and perform analysis and provide results of the analysis to a reputation service. Thereby, the temporarily allowed communication can be used to learn information about a threat which would not have been available if all communication from that IP address had actually been blocked at the network appliance.