The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Aug. 05, 2014
Filed:
Jun. 29, 2011
Venkatasubramanian Swaminathan, San Jose, CA (US);
Deepak Goel, Sunnyvale, CA (US);
Jianhui Huang, Fremont, CA (US);
John Keen, Mountain View, CA (US);
Jean-marc Frailong, Los Altos Hills, CA (US);
Srinivasan Jagannadhan, Sunnyvale, CA (US);
Srilakshmi Adusumalli, San Jose, CA (US);
Venkatasubramanian Swaminathan, San Jose, CA (US);
Deepak Goel, Sunnyvale, CA (US);
Jianhui Huang, Fremont, CA (US);
John Keen, Mountain View, CA (US);
Jean-Marc Frailong, Los Altos Hills, CA (US);
Srinivasan Jagannadhan, Sunnyvale, CA (US);
Srilakshmi Adusumalli, San Jose, CA (US);
Juniper Networks, Inc., Sunnyvale, CA (US);
Abstract
A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.