Patent ID: 8069469

Claim:
A method for addressing security in a TCP-based asymmetrical network having a plurality of paths, a plurality of security elements, and a centralized database, wherein each security element is coupled to at least one path, the method comprising: receiving at least one of a plurality of handshake messages from the plurality of security elements; determining that the received handshake message is new to the centralized database; associating the received handshake message to an existing stored entry in the centralized database, (A) wherein the existing stored entry in the centralized database corresponds to a previously received handshake message from one of the plurality of security elements, (B) wherein the association of the received handshake message to the existing stored entry in the centralized database is related to at least one of an attempted session and an allowed session, and (C) wherein the centralized database is configured to track the plurality of handshake messages, one or more associations of the plurality of handshake messages with one or more existing stored entries, and one or more allowed sessions; storing the received handshake message in the centralized database; and storing a determination in the centralized database that a session is allowed, based on the association of the received handshake message to the existing stored entry.