Patent ID: 8789135
Filing Date: 2014-07-22
Classification: H04L

Abstract:
1. A computer-implemented method for providing stateful firewall service to a network having a software-configured switch, comprising: identifying a traffic flow of data from a source server or end-host to a destination server or end-host; providing the software-configured switch with a precautionary traffic routing plan in which the traffic flow is routed through a firewall implementing a predetermined rule; in response to finding the traffic flow in compliance with the predetermined rule, marking the traffic flow as being in a flow state and identifying a plurality of packets associated with the traffic flow; in response to detecting a violation of the predetermined rule, marking the traffic flow as being in a breach state; and providing the software-configured switch with an update to the precautionary traffic routing plan in which a traffic flow in the breach state is blocked, the plurality associated with a traffic flow in the flow state bypasses the firewall, and all other packets are routed through the firewall.