Patent ID: 7076650
Filing Date: 2006-07-11
Classification: H04L

Abstract:
1. A method of scanning a communication received at a firewall for target content, wherein the communication is directed to one of a set of computer nodes connected to the firewall, comprising: maintaining on the firewall a scanning module configured to scan communications received at the firewall; maintaining a set of criteria for determining when one of said communications may be scanned at a computer node connected to the firewall instead of at the firewall; partitioning responsibility for scanning said communications between said firewall and a first computer node connected to the firewall; receiving a first communication at the firewall, wherein said first communication is intended for said first computer node; identifying one or more attributes of said first communication; determining from said criteria and said attributes whether to scan said first communication for target content on the firewall; determining from said criteria and said attributes whether said first computer node is configured to scan said first communication for said target content; and forwarding said first communication to said first computer node; wherein said first computer node receives and scans the communication for said target content; wherein said partitioning comprises: receiving scanning capabilities of a first computer node connected to the firewall; consulting a set of scanning requirements specified by an operator of the firewall; and specifying a set of criteria to identify when a communication may be scanned for target content by said first computer node.