Patent ID: 6317837
Filing Date: 2001-11-13
Classification: G06F,H04L,Y10S

Abstract:
A network arrangement comprising a first group of nodes defining an internal network and a second group of nodes defining an external network, said external network being connected in communication with said internal network by an intermediate node including a bastion firewall for protecting the nodes of the internal network from unauthorized communication originating at external nodes, the improvement comprising said internal network including,(a) a network attached device (NAD), and(b) a NAD node at which must be received every request for network access to said NAD initially originated at any other node of the network arrangement, said NAD node including computer readable medium having computer-executable instructions that perform the steps of,(i) receiving at said NAD node a request for network access to said NAD,(ii) determining whether the request for network access to said NAD is authorized,(iii) providing network access to said NAD when a request is authorized, and(iv) denying network access to said NAD when a request is not authorized,said NAD thereby being protected by a dedicated NAD firewall at said NAD node from unauthorized network access requests originating at said intermediate and internal and external nodes of the network arrangement.