Patent ID: 9100324
Filing Date: 2015-08-04
Classification: H04L

Abstract:
1. A protocol analyzer apparatus comprising: (a) a first interface port configured to receive one or more unencrypted data packets, said one or more data packets each comprising a full packet that may include a payload, (b) a second interface port configured to transmit data that may include said payload; (c) a connection test module comprising a firewall state table memory analyzing and indicating permitted existing connections and an indication of whether said full packet of each said existing permitted connection contains a payload, said connection test module configured to indicate whether said full packet is part of a said existing connection and whether said full packet contains a payload; (d) a special protocol analyzer test module comprising at least one protocol ruleset, said special protocol analyzer test module configured to parse and analyze the one or more data packets, in accordance with the at least one protocol ruleset to examine for recognized content objects embedded in said one or more data packets; and wherein the one or more data packets including the payload are dropped if the examined content objects do not match a protocol listed in the at least one protocol ruleset, or said one or more data packets are allowed to be transmitted through said second interface port if the examined content objects match a protocol listed in the at least one protocol ruleset.