Cisco Technology, Inc.

Sandy X Chang

Changhong Shen

Yubei Cao

Chingsung Lin

In one embodiment, a method includes receiving, by a network node, a packet associated with a session. The method also includes performing, by the network node, a sequence-based anti-replay check and determining, by the network node, that the sequence-based anti-replay check rejected the packet. The method further includes performing, by the network node, a time-based anti-replay check, performing, by the network node, a selective anti-replay check, and determining, by the network node, whether to dynamically adjust a time-based anti-replay window size.

Growing community of inventors

Palo Alto, CA, United States of America

Sandy X Chang