Patent ID: 7735129
Filing Date: 2010-06-08
Classification: H04L

Abstract:
1. A firewall apparatus including plural virtual firewalls, each virtual firewall including a dependent firewall policy, the firewall apparatus comprising: a distribution management table for managing a user name and a virtual firewall ID; a part configured to receive authentication information for a network connection from a user terminal, and hold the user name included in the authentication information; a part configured to report the authentication information to an authentication server; and a part configured to receive an authentication response from the authentication server, and hold a user ID, included in the authentication response, to be provided to the user terminal, wherein, the firewall apparatus registers the user ID in the distribution management table by associating the user ID with the user name, after a connection between the user terminal and a network is established, the firewall apparatus searches the distribution management table by using a source user ID of a packet sent from the user terminal as a search key, and retrieves the virtual firewall ID associated with the source user ID so as to distribute the packet sent from a communication partner terminal to a virtual firewall corresponding to the virtual firewall ID, and the firewall apparatus searches the distribution management table by using a destination user ID of a packet sent from the communication partner terminal of the user terminal as the search key, and retrieves the virtual firewall ID associated with the destination user ID so as to distribute the packet sent from the communication partner terminal to the virtual firewall corresponding to the virtual firewall ID.