Patent ID: 11949659
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. One or more tangible non-transitory computer readable mediums containing instructions, wherein the instructions, when executed, cause one or more processors to:
obtain a first packet of an Internet Protocol packet flow at a security device;
provide the first packet to a firewall of the security device;
obtain, at a classifier of the security device, an indication from the firewall that the Internet Protocol packet flow is to be split between a processing entity of the security device and the firewall of the security device such that non-control packets of the Internet Protocol packet flow are to be provided to the processing entity and control packets configured to indicate a potential change in a flow state of the Internet Protocol packet flow are to be provided to the firewall;
store, at the security device, data that indicates that the non-control packets of the Internet Protocol packet flow are to be provided to the processing entity;
obtain one or more non-control packets of the Internet Protocol packet flow at the security device;
determine, at the classifier by comparing data contained in the one or more non-control packets of the Internet Protocol packet flow to the data stored at security device, that the one or more non-control packets of the Internet Protocol packet flow are to be provided to the processing entity;
provide the one or more non-control packets of the Internet Protocol packet flow to the processing entity in response to the determining;
obtain a control packet of the Internet Protocol packet flow at the security device;
identify a control flag in the control packet that indicates a potential change in the flow state of the Internet Protocol packet flow;
provide the control packet of the Internet Protocol packet flow to the firewall in response to identifying the control flag in the control packet;
obtain, at the classifier, an indication from the firewall that non-control packets of the Internet Protocol packet flow should no longer be provided to the processing entity;
obtain a non-control packet of the Internet Protocol packet flow at the security device; and
provide the non-control packet of the Internet Protocol packet flow to the firewall.