SE9802415D0 - Firewall apparatus and method of controlling network data packet traffic between internal and external networks - Google Patents

Firewall apparatus and method of controlling network data packet traffic between internal and external networks

Info

Publication number
SE9802415D0
SE9802415D0 SE9802415A SE9802415A SE9802415D0 SE 9802415 D0 SE9802415 D0 SE 9802415D0 SE 9802415 A SE9802415 A SE 9802415A SE 9802415 A SE9802415 A SE 9802415A SE 9802415 D0 SE9802415 D0 SE 9802415D0
Authority
SE
Sweden
Prior art keywords
data packet
internal
network data
external networks
controlling network
Prior art date
Application number
SE9802415A
Other languages
English (en)
Other versions
SE513828C2 (sv
SE9802415L (sv
Inventor
Mikael SUNDSTROEM
Olof Johansson
Joel Lindholm
Andrej Brodnik
Svante Carlsson
Original Assignee
Efficient Networking Ab
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Efficient Networking Ab filed Critical Efficient Networking Ab
Priority to SE9802415A priority Critical patent/SE513828C2/sv
Publication of SE9802415D0 publication Critical patent/SE9802415D0/sv
Priority to PCT/SE1999/001202 priority patent/WO2000002114A2/en
Priority to CN99810588A priority patent/CN1317119A/zh
Priority to EEP200000783A priority patent/EE200000783A/xx
Priority to JP2000558448A priority patent/JP2002520892A/ja
Priority to EA200100099A priority patent/EA200100099A1/ru
Priority to IL14048199A priority patent/IL140481A0/xx
Priority to EP99933426A priority patent/EP1127302A2/en
Priority to KR1020007015107A priority patent/KR20010072661A/ko
Priority to AU49484/99A priority patent/AU4948499A/en
Priority to SK2023-2000A priority patent/SK20232000A3/sk
Priority to CA002336113A priority patent/CA2336113A1/en
Priority to HU0103814A priority patent/HUP0103814A2/hu
Priority to PL99345701A priority patent/PL345701A1/xx
Priority to IDW20002747A priority patent/ID29386A/id
Publication of SE9802415L publication Critical patent/SE9802415L/sv
Publication of SE513828C2 publication Critical patent/SE513828C2/sv
Priority to BG105087A priority patent/BG105087A/bg
Priority to NO20006668A priority patent/NO20006668L/no
Priority to US09/904,837 priority patent/US20020016826A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0263—Rule management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Business, Economics & Management (AREA)
  • Business, Economics & Management (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
SE9802415A 1998-02-07 1998-07-02 Brandväggsapparat och metod för att kontrollera nätverksdatapakettrafik mellan interna och externa nätverk SE513828C2 (sv)

Priority Applications (18)

Application Number Priority Date Filing Date Title
SE9802415A SE513828C2 (sv) 1998-07-02 1998-07-02 Brandväggsapparat och metod för att kontrollera nätverksdatapakettrafik mellan interna och externa nätverk
IDW20002747A ID29386A (id) 1998-07-02 1999-07-02 Aparatus dinding pengaman dan metoda mengontrol lalu listas pengiriman data jaringan antara internal dan eksternal
KR1020007015107A KR20010072661A (ko) 1998-07-02 1999-07-02 내부 및 외부 네트워크 사이의 네트워크 데이터 패킷트래픽을 제어하는 파이어월 장치 및 방법
SK2023-2000A SK20232000A3 (sk) 1998-07-02 1999-07-02 OCHRANNµ STENA NA RIADENIE SIE›OVEJ PREVµDZKY éDAJOVíCH PAKETOV MEDZI VNéTORNíMI A VONKAJćÖMI SIE›AMI A SPâSOB JEJ RIADENIA
EEP200000783A EE200000783A (et) 1998-07-02 1999-07-02 Tulemüüri aparatuur ja meetod võrgus andmepakettide liikluse juhtimiseks sise- ja välisvõrkude vahel
JP2000558448A JP2002520892A (ja) 1998-07-02 1999-07-02 内部、外部回路網間の回路網データパケットのトラヒックを制御するファイアウォールの装置および方法
EA200100099A EA200100099A1 (ru) 1998-07-02 1999-07-02 Межсетевой экран и способ управления сетевым трафиком передачи пакетов данных между внутренней и внешней сетями
IL14048199A IL140481A0 (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
EP99933426A EP1127302A2 (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
PCT/SE1999/001202 WO2000002114A2 (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
AU49484/99A AU4948499A (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
CN99810588A CN1317119A (zh) 1998-07-02 1999-07-02 控制内部与外部网络之间的网络数据包通讯的防火墙设备和方法
CA002336113A CA2336113A1 (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
HU0103814A HUP0103814A2 (hu) 1998-07-02 1999-07-02 Tűzfal és eljárás hálózati adatcsomagok belső hálózatok és külső hálózatok közötti forgalmának vezérlésére
PL99345701A PL345701A1 (en) 1998-07-02 1999-07-02 Firewall apparatus and method of controlling network data packet traffic between internal and external networks
BG105087A BG105087A (bg) 1998-07-02 2000-12-22 Устройство за контролиран достъп и метод за управление на трафика на пакет от мрежови данни между вътрешни и външни мрежи
NO20006668A NO20006668L (no) 1998-07-02 2000-12-27 Brannvegg og fremgangsmåte til styring av nettverk-trafikk av datapakker mellom interne og eksterne nettverk
US09/904,837 US20020016826A1 (en) 1998-02-07 2001-07-16 Firewall apparatus and method of controlling network data packet traffic between internal and external networks

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
SE9802415A SE513828C2 (sv) 1998-07-02 1998-07-02 Brandväggsapparat och metod för att kontrollera nätverksdatapakettrafik mellan interna och externa nätverk

Publications (3)

Publication Number Publication Date
SE9802415D0 true SE9802415D0 (sv) 1998-07-02
SE9802415L SE9802415L (sv) 2000-01-03
SE513828C2 SE513828C2 (sv) 2000-11-13

Family

ID=20411974

Family Applications (1)

Application Number Title Priority Date Filing Date
SE9802415A SE513828C2 (sv) 1998-02-07 1998-07-02 Brandväggsapparat och metod för att kontrollera nätverksdatapakettrafik mellan interna och externa nätverk

Country Status (18)

Country Link
US (1) US20020016826A1 (sv)
EP (1) EP1127302A2 (sv)
JP (1) JP2002520892A (sv)
KR (1) KR20010072661A (sv)
CN (1) CN1317119A (sv)
AU (1) AU4948499A (sv)
BG (1) BG105087A (sv)
CA (1) CA2336113A1 (sv)
EA (1) EA200100099A1 (sv)
EE (1) EE200000783A (sv)
HU (1) HUP0103814A2 (sv)
ID (1) ID29386A (sv)
IL (1) IL140481A0 (sv)
NO (1) NO20006668L (sv)
PL (1) PL345701A1 (sv)
SE (1) SE513828C2 (sv)
SK (1) SK20232000A3 (sv)
WO (1) WO2000002114A2 (sv)

Families Citing this family (61)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU2001243364A1 (en) * 2000-03-01 2001-09-12 Sun Microsystems, Inc. System and method for avoiding re-routing in a computer network during secure remote access
US20040073617A1 (en) * 2000-06-19 2004-04-15 Milliken Walter Clark Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail
US6950947B1 (en) 2000-06-20 2005-09-27 Networks Associates Technology, Inc. System for sharing network state to enhance network throughput
US7013482B1 (en) 2000-07-07 2006-03-14 802 Systems Llc Methods for packet filtering including packet invalidation if packet validity determination not timely made
US7031267B2 (en) 2000-12-21 2006-04-18 802 Systems Llc PLD-based packet filtering methods with PLD configuration data update of filtering rules
GB2371186A (en) * 2001-01-11 2002-07-17 Marconi Comm Ltd Checking packets
JP3963690B2 (ja) * 2001-03-27 2007-08-22 富士通株式会社 パケット中継処理装置
US7640434B2 (en) * 2001-05-31 2009-12-29 Trend Micro, Inc. Identification of undesirable content in responses sent in reply to a user request for content
US6993660B1 (en) 2001-08-03 2006-01-31 Mcafee, Inc. System and method for performing efficient computer virus scanning of transient messages using checksums in a distributed computing environment
US7117533B1 (en) * 2001-08-03 2006-10-03 Mcafee, Inc. System and method for providing dynamic screening of transient messages in a distributed computing environment
JP3864743B2 (ja) * 2001-10-04 2007-01-10 株式会社日立製作所 ファイアウォール装置、情報機器および情報機器の通信方法
US7298745B2 (en) 2001-11-01 2007-11-20 Intel Corporation Method and apparatus to manage packet fragmentation with address translation
US8185943B1 (en) * 2001-12-20 2012-05-22 Mcafee, Inc. Network adapter firewall system and method
US7761605B1 (en) 2001-12-20 2010-07-20 Mcafee, Inc. Embedded anti-virus scanner for a network adapter
KR20030080412A (ko) * 2002-04-08 2003-10-17 (주)이카디아 외부네트워크 및 내부네트워크로부터의 침입방지방법
AU2003227123B2 (en) * 2002-05-01 2007-01-25 Firebridge Systems Pty Ltd Firewall with stateful inspection
AUPS214802A0 (en) * 2002-05-01 2002-06-06 Firebridge Systems Pty Ltd Firewall with stateful inspection
US7243141B2 (en) * 2002-05-13 2007-07-10 Sony Computer Entertainment America, Inc. Network configuration evaluation
US7676579B2 (en) * 2002-05-13 2010-03-09 Sony Computer Entertainment America Inc. Peer to peer network communication
US8224985B2 (en) * 2005-10-04 2012-07-17 Sony Computer Entertainment Inc. Peer-to-peer communication traversing symmetric network address translators
US8060626B2 (en) 2008-09-22 2011-11-15 Sony Computer Entertainment America Llc. Method for host selection based on discovered NAT type
US8234358B2 (en) * 2002-08-30 2012-07-31 Inpro Network Facility, Llc Communicating with an entity inside a private network using an existing connection to initiate communication
FR2844949B1 (fr) * 2002-09-24 2006-05-26 Radiotelephone Sfr Procede de gestion d'une configuration d'une passerelle par un utilisateur de la passerelle
EP1628693A1 (en) * 2003-06-04 2006-03-01 Inion Ltd. Biodegradable implant and method for manufacturing one
CN100345118C (zh) * 2003-11-07 2007-10-24 趋势株式会社 数据包内容过滤装置及方法
US7669240B2 (en) * 2004-07-22 2010-02-23 International Business Machines Corporation Apparatus, method and program to detect and control deleterious code (virus) in computer network
JP4405360B2 (ja) * 2004-10-12 2010-01-27 パナソニック株式会社 ファイアウォールシステム及びファイアウォール制御方法
KR100582555B1 (ko) * 2004-11-10 2006-05-23 한국전자통신연구원 네트워크 트래픽 이상 상태 검출/표시 장치 및 그 방법
US7769858B2 (en) * 2005-02-23 2010-08-03 International Business Machines Corporation Method for efficiently hashing packet keys into a firewall connection table
US20060268852A1 (en) * 2005-05-12 2006-11-30 David Rosenbluth Lens-based apparatus and method for filtering network traffic data
US20070174207A1 (en) * 2006-01-26 2007-07-26 Ibm Corporation Method and apparatus for information management and collaborative design
US8903763B2 (en) * 2006-02-21 2014-12-02 International Business Machines Corporation Method, system, and program product for transferring document attributes
CN101014048B (zh) * 2007-02-12 2010-05-19 杭州华三通信技术有限公司 分布式防火墙系统及实现防火墙内容检测的方法
US8392981B2 (en) * 2007-05-09 2013-03-05 Microsoft Corporation Software firewall control
US7995478B2 (en) * 2007-05-30 2011-08-09 Sony Computer Entertainment Inc. Network communication with path MTU size discovery
US20080298354A1 (en) * 2007-05-31 2008-12-04 Sonus Networks, Inc. Packet Signaling Content Control on a Network
ATE547890T1 (de) * 2007-06-25 2012-03-15 Siemens Ag Verfahren zum weiterleiten von daten in einem dezentralen datennetz
US7933273B2 (en) * 2007-07-27 2011-04-26 Sony Computer Entertainment Inc. Cooperative NAT behavior discovery
CN101110830A (zh) * 2007-08-24 2008-01-23 张建中 创建多维地址协议的方法、装置和系统
WO2009068822A2 (fr) * 2007-11-16 2009-06-04 France Telecom Procede et dispositif de tri de paquets
US7856501B2 (en) 2007-12-04 2010-12-21 Sony Computer Entertainment Inc. Network traffic prioritization
US7856506B2 (en) 2008-03-05 2010-12-21 Sony Computer Entertainment Inc. Traversal of symmetric network address translator for multiple simultaneous connections
CN101827070A (zh) * 2009-03-06 2010-09-08 英华达股份有限公司 可携式通讯装置
US9407602B2 (en) * 2013-11-07 2016-08-02 Attivo Networks, Inc. Methods and apparatus for redirecting attacks on a network
US11507663B2 (en) 2014-08-11 2022-11-22 Sentinel Labs Israel Ltd. Method of remediating operations performed by a program and system thereof
US9710648B2 (en) 2014-08-11 2017-07-18 Sentinel Labs Israel Ltd. Method of malware detection and system thereof
US20160094659A1 (en) * 2014-09-25 2016-03-31 Ricoh Company, Ltd. Information processing system and information processing method
US9692727B2 (en) 2014-12-02 2017-06-27 Nicira, Inc. Context-aware distributed firewall
DE102016124993A1 (de) 2015-12-22 2017-06-22 Hirschmann Automation And Control Gmbh Netzwerk mit teilweiser unidirektionaler Datenübertragung
US11115385B1 (en) 2016-07-27 2021-09-07 Cisco Technology, Inc. Selective offloading of packet flows with flow state management
US10193862B2 (en) 2016-11-29 2019-01-29 Vmware, Inc. Security policy analysis based on detecting new network port connections
US11616812B2 (en) 2016-12-19 2023-03-28 Attivo Networks Inc. Deceiving attackers accessing active directory data
US11695800B2 (en) 2016-12-19 2023-07-04 SentinelOne, Inc. Deceiving attackers accessing network data
JP2020530922A (ja) 2017-08-08 2020-10-29 センチネル ラボ, インコーポレイテッドSentinel Labs, Inc. エッジネットワーキングのエンドポイントを動的にモデリングおよびグループ化する方法、システム、およびデバイス
US11470115B2 (en) 2018-02-09 2022-10-11 Attivo Networks, Inc. Implementing decoys in a network environment
US10762200B1 (en) 2019-05-20 2020-09-01 Sentinel Labs Israel Ltd. Systems and methods for executable code detection, automatic feature extraction and position independent code detection
US11190489B2 (en) 2019-06-04 2021-11-30 OPSWAT, Inc. Methods and systems for establishing a connection between a first device and a second device across a software-defined perimeter
CN112364360B (zh) * 2020-11-11 2022-02-11 南京信息职业技术学院 一种财务数据安全管理系统
US11579857B2 (en) 2020-12-16 2023-02-14 Sentinel Labs Israel Ltd. Systems, methods and devices for device fingerprinting and automatic deployment of software in a computing network using a peer-to-peer approach
US11899782B1 (en) 2021-07-13 2024-02-13 SentinelOne, Inc. Preserving DLL hooks
CN113783974B (zh) * 2021-09-09 2023-06-13 烽火通信科技股份有限公司 一种动态下发map域规则的方法及装置

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0594196B1 (en) * 1992-10-22 1999-03-31 Cabletron Systems, Inc. Address lookup in packet data communications link, using hashing and content-addressable memory
US5606668A (en) * 1993-12-15 1997-02-25 Checkpoint Software Technologies Ltd. System for securing inbound and outbound data packet flow in a computer network
WO1997000471A2 (en) * 1993-12-15 1997-01-03 Check Point Software Technologies Ltd. A system for securing the flow of and selectively modifying packets in a computer network
US5757924A (en) * 1995-09-18 1998-05-26 Digital Secured Networks Techolognies, Inc. Network security device which performs MAC address translation without affecting the IP address
US5918018A (en) * 1996-02-09 1999-06-29 Secure Computing Corporation System and method for achieving network separation
US5889958A (en) * 1996-12-20 1999-03-30 Livingston Enterprises, Inc. Network access control system and process

Also Published As

Publication number Publication date
NO20006668L (no) 2001-03-01
NO20006668D0 (no) 2000-12-27
SK20232000A3 (sk) 2001-09-11
PL345701A1 (en) 2002-01-02
KR20010072661A (ko) 2001-07-31
EP1127302A2 (en) 2001-08-29
JP2002520892A (ja) 2002-07-09
WO2000002114A3 (en) 2000-02-17
BG105087A (bg) 2001-08-31
EA200100099A1 (ru) 2001-06-25
US20020016826A1 (en) 2002-02-07
ID29386A (id) 2001-08-30
HUP0103814A2 (hu) 2002-03-28
CN1317119A (zh) 2001-10-10
SE513828C2 (sv) 2000-11-13
WO2000002114A2 (en) 2000-01-13
CA2336113A1 (en) 2000-01-13
IL140481A0 (en) 2002-02-10
SE9802415L (sv) 2000-01-03
EE200000783A (et) 2001-10-15
AU4948499A (en) 2000-01-24

Similar Documents

Publication Publication Date Title
SE9802415D0 (sv) Firewall apparatus and method of controlling network data packet traffic between internal and external networks
US6295296B1 (en) Use of a single data structure for label forwarding and imposition
US7039018B2 (en) Technique to improve network routing using best-match and exact-match techniques
US6396833B1 (en) Per user and network routing tables
MX9800927A (es) Compuestos de bencimidazol.
MX9800791A (es) Direccionamiento de paquetes.
DE69912294D1 (de) Telekommunikationsnetzwerk mit veränderlichen adressenlernen, vermittlung und wegleitung
CA2226814A1 (en) System and method for providing peer level access control on a network
AU2347099A (en) System and method for using domain names to route data sent to a destination on a network
DE60233255D1 (de) Auf richtlinien basierende mechanismen zur auswahl von zugriffs-routern und mobilkontext
WO2004055993A3 (en) End-to-end location privacy in telecommunications networks
US20030058860A1 (en) Destination address filtering
WO1996013108A3 (en) Method and apparatus for determining ip communications path
WO2000056024A3 (en) Network switch
CA2249787A1 (en) Methods and apparatus for accelerating osi layer 3 routers
EP1251657A3 (en) Implementing managed networks services for custormers with duplicate IP networks
ATE480925T1 (de) Isolation von mit einem zugangsnetzwerk verbundenen hosts
WO1997002734A3 (en) Internet protocol (ip) work group routing
CA2309185A1 (en) In-band signaling for routing
ATE444665T1 (de) Entdeckung von infragekommenden zugangsroutern
EP1511249A3 (en) Router apparatus, route information distributing method, and communications system
DE60116399D1 (de) Adressierung und leitweglenkung in einem drahtlosen maschennetzwerk
CA2276577A1 (en) Method and apparatus for routing in a communication or data network, or a network comprising communication and data networks
FI119166B (sv) Förfarande och apparatur för att fatta ett routningsbeslut beroende på klassen för tjänstkvalitet
CA2349825A1 (en) Signalling message transport mechanism

Legal Events

Date Code Title Description
NUG Patent has lapsed