白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號
US10097515B2
公開日期
2018-10-09
申請人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

Note that in a case where a new entry for discarding packets of a specific flow (in other words, denying transfer of the specific flow) is set for the reception FW 5, the FWC 7 may implement a setting and registration of a new entry for a transmission source FW 5 in the same way as described above.

In addition, in the new entry set in the reception FW 5, a transmission source address is specified some cases. In this case, based on the specified transmission source address, the FWC 7 may identify the transmission source FW 5 to serve as a target in which a new entry is to be set.

As illustrated in, for example, FIG. 7, the FWC 7 may include a FW configuration information storage unit 74.

Information, which includes address information of the sub-networks 3 or nodes coupled to the core network 2 and an identifier of the FW 5 corresponding to the relevant address information, may be exemplarily stored in the FW configuration information storage unit 74.

In the example of FIG. 7, the identifier of the FW #1 is registered so as to correspond to the address information of the sub-network #1, and the identifier of the FW #2 is registered so as to correspond to the pieces of address information of the respective sub-networks #2 and #3. In addition, the identifier of the FW #3 is registered so as to correspond to the address information IP#B of a node B and the address information IP#C of a node C.

權(quán)利要求

1
微信群二維碼
意見反饋