Patent ID: 9467324
Filing Date: 2016-10-11
CPC Classification: G06F,H04L

Claim Text:
1. A firewall security platform for enhancing security of a network, the firewall security platform comprising: at least one interface to communicate an identity and current status of one or more traffic requesters; wherein communication data packets associated with the one or more traffic requesters are allowed for communication via the network or denied and blocked by the firewall security platform based on the current status of each of the one or more traffic requesters; at least one device for receiving instructions from a user, wherein the user's instructions comprise making a selection, wherein the selection comprises members that comprise at least one of the one or more traffic requesters, wherein the current status of each member of the selection is altered in response to the making of the selection; an IP exception list that allows the user's computer to communicate with IP addresses included by the IP exception list even when the IP addresses are unassociated with a known domain name; a DNS exception list comprising the one or more traffic requests that are associated with the current status that is allowed by the user; a domain name validation process to validate the communication data packets by comparing the communication data packets with a traffic requester table and set the current status of the one or more traffic requesters associated with the communication data packets that fail validation as blocked; and a domain name reply integrity process to determine an integrity of the communication data packets by correlating a DNS reply received within a window with a corresponding DNS request and set the current status of the one or more traffic requesters associated with the communication data packets with DNS replies that cannot be correlated with the corresponding DNS request to blocked; wherein the one or more traffic requesters are includable in a traffic requester group; wherein the user selects the traffic requester group via the interface; wherein the current status is defined as allowed or blocked, wherein the current status that is allowed permits communication of the communication data packets associated with the at least one of the one or more traffic requesters being allowed, and wherein the current status that is blocked denies communication of the communication data packets associated with the at least one of the one or more traffic requesters being blocked.