Patent ID: 8151340

Claim:
A non-transitory recording medium for storing a management program executed by a computer serving as a data relay device that is capable of executing a plurality of security functions in combination, the data relay device sequentially executing the plurality of security functions on inputted communication data based on a predetermined rule defined for each of the plurality of security functions to determine whether or not to permit the relay of the communication data, and denying, without executing unexecuted subsequent security functions, the relay of the communication data if the relay is determined to be rejected, the management program managing operations of the plurality of security functions, the management program when executed by the computer causes the computer to perform a method comprising: determining a transmission source of the inputted communication data; acquiring a determination result indicating relay permission or rejection of the inputted communication data for each of the sequential security functions; rejecting relay of the inputted communication data when any of the acquired determination results indicate rejection of the inputted communication data; and when relay of the inputted communication data has been rejected based on the acquired determination result from a second or subsequent security function, changing a rule defined for one or more of the security functions located upstream of the security function that has determined relay rejection to the rule defined for the security function that has determined relay rejection with respect to subsequent communication data transmitted by the transmission source.