Patent ID: 7992206
Filing Date: 2011-08-02
Classification: G06F,H04L

Abstract:
1. A network security apparatus comprising: an add-on pre-scanner card configured to receive a packet from a computer network, extract a payload from the received packet, associate a flow tag with the payload, and scan the payload to determine if the payload contains a virus, does not contain a virus, or cannot be ascertained as to whether or not it contains a virus; a computer having a local bus into which the add-on pre-scanner card is removably installed, the computer being configured to gather other payloads of the same packet flow as the payload to assemble a corresponding file, the computer including a file-based scan engine configured to scan the assembled file for viruses when the add-on pre-scanner card indicates that it cannot determine whether or not the payload contains a virus; and a shared memory interface coupled to the local bus of the computer, the add-on pre-scanner card being configured to pass the payload to the computer by writing the payload to the shared memory interface, the computer being configured to receive the payload by reading the payload from the shared memory interface.