Patent ID: 8813215
Filing Date: 2014-08-19
Classification: H04L

Abstract:
1. A computer-implemented method for processing application-level content of network service protocols, the method comprising: defining, within a firewall device, one or more content processing configuration schemes, each of the one or more content processing configuration schemes including a plurality of content processing configuration settings for one or more network service protocols; storing, by the firewall device, the one or more content processing configuration schemes; associating, by the firewall device, one or more of the stored content processing configuration schemes with a firewall policy; receiving an incoming network connection, at a networking subsystem of the firewall device the incoming connection being characterized by a source network address, a destination network address and a network service protocol; determining, by the networking subsystem, whether to allow or deny the incoming connection by identifying a matching firewall policy based on the source network address, the destination network address and the network service protocol and applying packet-layer firewall rules associated with the matching firewall policy; if the incoming connection is allowed, then: