Patent ID: 7735139

Claim:
A method of in-line scanning network data in asymmetric routing environments, the method comprising: receiving a first set of data packets in a first security computer, the first set of data packets being transmitted as part of a connection between a client computer and a server computer, the first set of data packets being originated by the client computer in a computer network; in the first security computer, scanning the first set of data packets for computer viruses; registering a connection tracking information to a second security computer, the connection tracking information relating to the connection between the client computer and the server computer, the connection tracking information being registered by the first security computer to the second security computer; forwarding the first set of data packets from the first security computer to a computer outside the computer network; receiving in the second security computer a second set of data packets responsive to the first set of data packets; and in the second security computer, consulting the connection tracking information to identify the second set of data packets as being transmitted in the connection between the client computer and the server computer; and forwarding the second set of data packets from the second security computer to the first security computer.