白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號
US10097515B2
公開日期
2018-10-09
申請人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術領域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

As already described, the FWC 7 may set the information of the discarding entry in, for example, an entry setting request message and may address, to the FW #x serving as a target, and transmit the entry setting request message.

In the examples of FIG. 8 and FIG. 9, in the FW #4, the number of discarded packets of the flow A from the transmission source address=“IP#1” exceeds the threshold value (1000 packets).

Therefore, the FWC 7 identifies, as a discarding entry setting target, the FW #1 corresponding to the transmission source sub-network #1 including the transmission source address=“IP#1”. The identification of the transmission source FW #1 may be performed based on, for example, the FW configuration information 741 described in FIG. 7.

In addition, the FWC 7 addresses, to the identified transmission source FW #1, and transmits the entry setting request message including the information of the discarding entry received from the reception FW #4 of the flow A.

If the relevant entry setting request message is received by the transmission source FW #1 and the discarding entry is registered in the entry table 54 in the FW #1, packets of the flow A are discarded by the FW #1 after that.

(Examples of Totalization and Analysis Processing in FW)

權利要求

1
微信群二維碼
意見反饋