Patent ID: 8370919
Filing Date: 2013-02-05
Classification: H04L

Abstract:
1. A method of authorizing traffic received at a host firewall of a host within a local network, the method comprising: receiving traffic transmitted from beyond an edge of the local network, the traffic destined for an edge traversal service within the host, the traffic including a payload destined for a target within host; authorizing the traffic to pass through the host firewall to the edge traversal service within the host, if the traffic is permitted by a firewall rule for the edge traversal service; receiving the payload at a virtual edge traversal interface of the host firewall, the payload being re-injected into the host firewall by the edge traversal service; evaluating the re-injected payload against a firewall rule for the target, the firewall rule for the target including an edge traversal criterion identifying whether edge traversal is permitted and other firewall criteria identifying characteristics of permitted traffic; and authorizing the re-injected payload to pass through the host firewall to the target within the host, if the edge traversal criterion of the firewall rule permits edge traversal via the virtual edge traversal interface of the host firewall and the re-injected payload satisfies the other firewall criteria of the firewall rule for the target.