Nicira, Inc.

Deepa Kalani

Jayant Jain

Anirban Sengupta

Subrahmanyam Manuguri

Alok S Tiagi

Sushil Kumar Singh

Sushruth Gopal

The method for implementing mechanisms for Layer 7 context accumulation for enforcing Layers 4, 7, and verb-based rules is presented. The method comprises: receiving stream data, and identifying a packet in the stream. If the packet includes Layer 7 headers: for each Layer 7 header: determining content of the packet identified by a Layer 7 header's identifier; and parsing the content to extract firewall input data. If one or more rules at least partially match the firewall input data, determining that a particular rule also includes additional information that cannot be found in the firewall input data; performing a DPI on the content to determine whether at least a portion of the additional information is found in the content; extracting additional input data from the content and adding it to the firewall input data; and applying the rules to the firewall input data to process the packet.

Growing community of inventors

Fremont, CA, United States of America

Deepa Kalani