Patent ID: 8671450

Claim:
A method comprising transparently proxying, by a gateway device, (i) a first plurality of Server Message Block/Common Internet File System (SMB/CIFS) protocol requests originated by a first process running on a client and relating to a file associated with a share of a server and (ii) a second plurality of SMB/CIFS protocol requests originated by a second process running on the client and relating to the file; and determining, by the gateway device, the existence or non-existence of malicious, dangerous or unauthorized content contained within the file by identifying data being read from or written to the file as a result of the first plurality of SMB/CIFS protocol requests and the second plurality of SMB/CIFS protocol requests; buffering the identified data into a single shared file buffer within a memory of the gateway device; and when one or more of a plurality of scanning conditions are satisfied, then performing content filtering on the shared file buffer.