Application state sharing in a firewall cluster

摘要

A firewall cluster system comprises a first node operable to receive a connection in a firewall cluster having three or more nodes, monitor packets of the received connection and determining application state data associated with the connection from the monitored packets in the first node, and share application state data with at least another node in the firewall cluster.

主权项

1. A non-transitory computer readable medium comprising computer executable instructions stored thereon that when executed cause one or more processors to:
receive connection information by a first node of a firewall cluster having three or more nodes; share firewall cluster state information upon establishing a connection; compare data patterns in packets received at the connection to known data patterns to generate application state data, the application state data indicating an identity of an application communicating with the first node; and share application state data with at least another node in the firewall cluster.