Patent ID: 7480794

Claim:
A method for secure transport in a network gateway between an internal client and an external server comprising: intercepting an outgoing connection; identifying a destination name from the outgoing connection; performing a lookup of a destination address at a network gateway, based at least in part on, the destination name; establishing secure connection with a destination server using the destination address; associating the outgoing connection with the secure connection to produce an association, the association being operable to transfer message traffic over the secure connection in a continuous manner from the outgoing connection to the destination server; accepting the outgoing connection as a local connection completing a connection exchange; emulating the destination as an endpoint of the outstanding connection; identifying data to be transmitted as message traffic via the outgoing connection; receiving the identified data; and redirecting the identified data via the secure connection; mapping data sent from a client to the secure connection where the data is intended from transmission via the outgoing connection; scanning the outgoing connection and extracting a destination hostname; receiving data over the local connection; mapping the secure connection to the destination name using an index; forwarding the received data to the destination server based on the index; identifying a ciphersuite corresponding to the destination name where the ciphersuite is indicative of an encryption algorithm operable via the secure connection; and applying the ciphersuite to the received data associated with the outgoing connection prior to red redirecting.