Patent ID: 9729655
Date: 2017-08-08
CPC Classifications: H04L

Claim:
1. A network gateway device, implemented at least partially in hardware, for managing a transfer of data over the data network, the network gateway device comprising: a processor; a signature analyzer comprising a policy manager to store policies and associated signatures, including a first policy that diverts data transfers between a plurality of nodes on the data network to a proxy server which scans for malicious code associated with at least one signature; a network interface, communicatively coupled to the processor and the data network, to receive packets transmitted between the plurality of nodes of the data network; a session identifier communicatively coupled to receive the packet from the network interface and to identify data associated with a first communication session between a first node and a second node of the data network, wherein the signature analyzer further comprises a comparator, the signature analyzer to receive the identified data of the first communication session and the comparator comparing the identified data against signatures from a signature database, the signature analyzer to produce a control signal responsive to a policy associated with a signature matching the identified data; and a session controller, responsive to receiving the control signal indicating the signature match, to perform further processing of the identified data, and responsive to the second input not receiving the control signal, the session controller sending the identified data over the second output without further processing.