Patent ID: 7555552
Filing Date: 2009-06-30
Classification: H04L

Abstract:
1. A method for managing policies within a network intermediary device, comprising: opening a network connection between a client and the network intermediary device when said connection is permitted by a policy comprising a first rule set relating to network connections; processing a transaction over the network connection according to at least one additional policy, said additional policy comprising a second rule set for processing data received at the intermediary device for the transaction, said second rule set being different from the first rule set, the transaction comprising a request received from a client over the network connection; utilizing a policy ticket describing actions and properties to be taken during a communication, said actions and properties corresponding to a version of policy rules current at a beginning of the communication and updated thereafter, as the policy ticket is transported between a plurality of checkpoints defining a flow of the communication and according to determinations, at any of the plurality of checkpoints, of actions to be taken during the communication; upon completion of the transaction, closing the network connection when an evaluation determines that the connection should be closed, and not closing the connection when an evaluation determines that the connection should not be closed; and in the event the connection is not closed, reusing, subject to the at least one additional policy, the connection for further transactions with the client.