Method And Apparatus For Network Security

摘要

A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

主权项

1. A method of routing data traffic between networks, comprising:
receiving the data traffic from a source network; determining whether the data traffic may be directly forwarded to a destination network; forwarding the data traffic to an OE if it is determined that the data traffic may not be directly forwarded to the second network; and forwarding the data traffic from the OE to the destination network.