Security processing in active security devices

摘要

Methods, systems, and apparatus, including computer program products, featuring receiving at a first security device a packet. The first security device determines that the packet is associated with a flow assigned to a distinct second security device. The first security device sends the packet to the second security device. After the second security device performs security processing using the packet, the first security device receives from the second security device a message regarding the packet. The first security device transmits the packet.

主权项

1. A method for processing packets at a first security device, the method comprising:
receiving a packet at the first security device; determining whether the packet is associated with a flow assigned to a second security device, wherein the second security device is distinct from the first security device; in the event that the packet is associated with the flow assigned to the second security device:
sending the packet to the second security device; andafter the second security device performs security processing using the packet, receiving from the second security device a message regarding the packet; in the event that the packet is not associated with the flow assigned to the second security device:
determining whether the packet is associated with a previously assigned flow;in the event that the packet is not associated with the previously assigned flow:
storing a new flow relating to the packet in the first security device; andnotifying the second security device that the new flow is stored in the first security device; andperforming, using the first security device, security processing using the packet; and transmitting the packet from the first security device.