Method and system for network intrusion prevention

摘要

According to some embodiments of the invention, a method for network protection is provided. The method includes receiving with a network security software a request from an entity to stop at least a portion of unauthorized network traffic from being transmitted through a firewall. The entity lacks control over the firewall and the network security software is operable to control the firewall. The method also includes using the network security software to automatically determine that the entity is an authorized entity authorized to make the request. The method also includes initiating a block of the unauthorized network traffic at the firewall in response to the automatic determination.

主权项

1. A method for network protection of a first network from unauthorized network traffic received from a second network, the method comprising:
pre-installing a first network security software on a first firewall associated with the first network and controlled by a first entity; pre-installing a second network security software on a second firewall associated with the second network and configured to be controlled by a second entity; receiving a permission from the second entity to allow the first entity to control the second network security software; wherein, in response to the first firewall receiving the unauthorized network traffic,
blocking the unauthorized network traffic with the first network security software from reaching nodes on the first network;detecting with the first network security software on the first firewall whether the unauthorized network traffic is originating from the second network;providing a request from the first network security software to the second network security software in accordance with the permission; andin response to the second entity authentication of the request, activating, with the first network security software, the second network security software to block the unauthorized network traffic from leaving the second network.