白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專(zhuān)利號(hào)
US10097515B2
公開(kāi)日期
2018-10-09
申請(qǐng)人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類(lèi)
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說(shuō)明書(shū)

An example of FIG. 9 indicates that 1168 packets each having a transmission source address=IP#1 (the flow A), a protocol type=TCP, a port number=56, and a destination address=IP#4 are discarded in the measurement time period.

In addition, it illustrates that 489 packets each having a transmission source address=IP#2 (the flow B), a protocol type=a user datagram protocol (UDP), a port number=32, and a destination address=IP#4 are discarded in the measurement time period.

Here, if it is assumed that a threshold value of the number of discarded packets is “1000”, the number of discarded packets of the flow A exceeds the threshold value in the example of FIG. 9. Note that the threshold value of the number of discarded packets may be exemplarily arbitrarily set or changed by an administrator of the FW system 1. The number of discarded packets is an example of an indicator of a data amount discarded in the corresponding FW 5.

The FWC 7 may set, for the transmission source FW #1 of the flow A, a flow entry (may be conveniently called a “discarding entry” or a “FW entry”) for discarding packets of the flow A in which the number of discarded packets thereof exceeds the threshold value.

權(quán)利要求

1
微信群二維碼
意見(jiàn)反饋