Patent ID: 8984114
Filing Date: 2015-03-17
Classification: H04L

Abstract:
1. A method comprising: receiving, at a first security gateway, session information for a network connection between a virtual machine and a first host machine of the first security gateway, the session information associated with a session corresponding to a network connection between the virtual machine and a second host machine of a second security gateway, wherein the second security gateway performs security processing for the network connection between the virtual machine and the second host machine during the session; receiving a packet associated with the session at the same time as receiving the session information; migrating the connection of the virtual machine from the second host machine to the first host machine using the session information, wherein the session information having been transferred from the second security gateway to the first security gateway in response to the virtual machine being transferred from the first host machine to the second host machine to maintain security processing for the session during migration of the connection, the first and second security gateways being separate physical devices; and thereafter performing security processing for the migrated connection of the session at the first security gateway.