Patent ID: 8769664

Claim:
A method for processing packets at a first security device, the method comprising: receiving a packet at the first security device; determining whether the packet is associated with a previously assigned flow; in the event that the packet is not associated with the previously assigned flow: storing a new flow relating to the packet in the first security device; and notifying a distinct second security device that the new flow is stored in the first security device; in the event that the packet is associated with the previously assigned flow: determining whether the packet is associated with a flow assigned to the distinct second security device; in the event that the packet is determined to be associated with the flow assigned to the distinct second security device: sending the packet to the distinct second security device; after the distinct second security device performs security processing using the packet, receiving from the distinct second security device a message regarding the packet; and transmitting the packet; in the event that the packet is not associated with the flow assigned to the distinct second security device, classifying, using the first security device, a second flow according to an application associated with the second flow, the packet being associated with the second flow.