Applying a packet routing policy to an application session
    1.
    发明授权
    Applying a packet routing policy to an application session 有权
    将数据包路由策略应用于应用程序会话

    公开(公告)号:US08826372B1

    公开(公告)日:2014-09-02

    申请号:US14061722

    申请日:2013-10-23

    IPC分类号: H04L29/06 H04L29/08 H04W12/00

    摘要: A security gateway includes packet routing policies, each including a host network address, an application network address, and a forwarding interface. In routing data packets of an application session, the security gateway: recognizes the application session between a network and an application; determines a user identity from an application session record for the application session; determines packet routing policies applicable to the application session based on the user identity; receives a data packet for the application session, including a source network address and a destination network address; compares the source network address with the host network address, and the destination network address with the application network address; and in response to finding a match between the source network address and the host network address, and between the destination network address and the application network address, processes the data packet using the forwarding interface of the packet routing policy.

    摘要翻译: 安全网关包括分组路由策略,每个路由策略包括主机网络地址,应用网络地址和转发接口。 在路由应用会话的数据包时,安全网关:识别网络和应用之间的应用会话; 从应用会话的应用会话记录中确定用户身份; 基于用户身份确定适用于应用会话的分组路由策略; 接收应用会话的数据包,包括源网络地址和目的网络地址; 将源网络地址与主机网络地址进行比较,将目的网络地址与应用网络地址进行比较; 并且响应于找到源网络地址和主机网络地址之间以及目的地网络地址和应用网络地址之间的匹配,使用分组路由策略的转发接口处理数据分组。

    System and Method to Customize a Security Log Analyzer
    3.
    发明申请
    System and Method to Customize a Security Log Analyzer 审中-公开
    自定义安全日志分析器的系统和方法

    公开(公告)号:US20080229418A1

    公开(公告)日:2008-09-18

    申请号:US11686119

    申请日:2007-03-14

    IPC分类号: G06F12/14

    摘要: Systems and methods adapted to customize a security log analyzer to recognize a security log, the system including at least one network security device for processing data traffic on a data network, the network security device associated with at least one computing device, and adapted to generate a security log, the system further including rule builder software adapted to generate a rule for recognizing at least one item in a security log and a log analyzer adapted to apply the rule in analyzing a security log.

    摘要翻译: 适于定制安全日志分析器以识别安全日志的系统和方法,所述系统包括用于处理数据网络上的数据业务的至少一个网络安全设备,与至少一个计算设备相关联的网络安全设备,并适于生成 安全日志,所述系统还包括适于生成用于识别安全日志中的至少一个项目的规则的规则构建器软件以及适于在分析安全日志中应用所述规则的日志分析器。