US6009475A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Filter rule validation and administration for firewalls
Assignee: Trend Micro Inc
•
Filing: 1996-12-23
•
Granted: 1999-12-28
•
Expires: 2016-12-23
Abstract
Abstract Filter rules on a firewall between a secure computer network and a nonsecure computer network are validated from a user interface. A user interface is presented in which a test packet can be defined. The user interface includes controls for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks. A defined test packet is validated against a set of filter rules in the firewall or matched against the filter rules to determine those filter rules with matching attributes to the defined packet. When validating, responsive to the failure of the test packet in the validating step, the filter rule in the set of filter rules which denied the test packet is displayed.
Inventors
- 👤 Theodore Jack London Shrader
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 17:44
CPC Classifications
G; G06; G06F; G06F15/00; G06F15/16; H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
127 words
A method for validating test packets against a set of filter rules for a firewall between a secure computer network and a nonsecure computer network comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, validating a defined test packet against a set of filter rules in the firewall; and responsive to failure of the test packet in the validating step, displaying a filter rule which denied the test packet in the set of filter rules.
Claim 2
Independent Claim
127 words
A method for validating test packets against a set of filter rules for a firewall between a secure computer network and a nonsecure computer network comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, validating a defined test packet against a set of filter rules in the firewall; and responsive to failure of the test packet in the validating step, displaying a filter rule which denied the test packet in the set of filter rules.
Claim 3
Dependent Claim
47 words
The method as recited in claim 1, further comprising the step of presenting a list of filter rules from the set of filter rules, wherein the filter rule which denied the test packet is presented in a different manner than other filter rules in the presented list.
Claim 4
Dependent Claim
58 words
The method as recited in claim 2, further comprising the step of presenting a graphical bar representing the set of filter rules, wherein a distance that the packet traveled in the set of filter rules is indicated by changing the presentation of the graphical bar at a position representative of the filter rule which denied the test packet.
Claim 5
Dependent Claim
30 words
The method as recited in claim 1 further comprising the steps of: retrieving a plurality of test packets from memory; and running the validating and displaying steps in batch mode.
Claim 6
Dependent Claim
37 words
The method as recited in claim 2 further comprising the steps of: responsive to user input, selecting a filter rule in the presented list; and responsive to user input, performing an action on the selected filter rule.
Claim 7
Independent Claim
148 words
A method for validating test packets against a set of filter rules for a firewall computer between a secure computer network and a nonsecure computer network, comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, running a query on a test packet to determine whether any filter rules share attributes with the test packet; displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and responsive to user input, performing an action on a selected filter rule.
Claim 8
Independent Claim
148 words
A method for validating test packets against a set of filter rules for a firewall computer between a secure computer network and a nonsecure computer network, comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, running a query on a test packet to determine whether any filter rules share attributes with the test packet; displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and responsive to user input, performing an action on a selected filter rule.
Claim 9
Dependent Claim
75 words
The method as recited in claim 6 further comprising the steps of: displaying a list of filter rules, wherein the matching filter rules are displayed in a different manner than nonmatching filter rules; and displaying a small bar proximate to the scatter bar, the small bar indicating a portion of the set of filter rules displayed as the list of filter rules relative to a complete list of tunnel definitions represented by the scatter bar.
Claim 10
Independent Claim
134 words
A system including processor and memory for validating test packets against a set of filter rules for a firewall between a secure computer network and a nonsecure computer network comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means responsive to user input for validating a defined test packet against a set of filter rules in the firewall; and means responsive to failure of the test packet in the validating step for displaying a filter rule which denied the test packet in the set of filter rules.
Claim 11
Independent Claim
134 words
A system including processor and memory for validating test packets against a set of filter rules for a firewall between a secure computer network and a nonsecure computer network comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means responsive to user input for validating a defined test packet against a set of filter rules in the firewall; and means responsive to failure of the test packet in the validating step for displaying a filter rule which denied the test packet in the set of filter rules.
Claim 12
Dependent Claim
46 words
The system as recited in claim 8, further comprising means for presenting a list of filter rules from the set of filter rules, wherein the filter rule which denied the test packet is presented in a different manner than other filter rules in the presented list.
Claim 13
Dependent Claim
57 words
The system as recited in claim 9, further comprising means for presenting a graphical bar representing the set of filter rules, wherein a distance that the packet traveled in the set of filter rules is indicated by changing the presentation of the graphical bar at a position representative of the filter rule which denied the test packet.
Claim 14
Dependent Claim
34 words
The system as recited in claim 6 further comprising the steps of: means for retrieving a plurality of test packets from memory; and means for running the validating and displaying steps in batch mode.
Claim 15
Dependent Claim
38 words
The system as recited in claim 7 further comprising: means responsive to user input for selecting a filter rule in the presented list; and means responsive to user input for performing an action on the selected filter rule.
Claim 16
Independent Claim
156 words
A system including processor and memory for validating test packets against a set of filtering for a firewall computer between a secure computer network and a nonsecure computer network, comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means responsive to user input for running a query on a test packet to determine whether any filter rules share attributes with the test packet; means for displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and means responsive to user input for performing an action on a selected filter rule.
Claim 17
Independent Claim
156 words
A system including processor and memory for validating test packets against a set of filtering for a firewall computer between a secure computer network and a nonsecure computer network, comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means responsive to user input for running a query on a test packet to determine whether any filter rules share attributes with the test packet; means for displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and means responsive to user input for performing an action on a selected filter rule.
Claim 18
Dependent Claim
76 words
The system as recited in claim 13 further comprising: means for displaying a list of filter rules, wherein the matching filter rules are displayed in a different manner than nomatching filter rules; and means for displaying a small bar proximate to the scatter bar, the small bar indicating a portion of the set of filter rules displayed as the list of filter rules relative to a complete list of tunnel definitions represented by the scatter bar.
Claim 19
Dependent Claim
138 words
A computer program product in a computer readable medium for validating test packets against a set of filter rules on a firewall between a secure computer network and a nonsecure computer network comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means for responsive to user input for validating a defined test packet against a set of filter rules in the firewall; and means responsive to failure of the test packet in the validating step for displaying a filter rule in the set of filter rules which denied the test packet.
Claim 20
Dependent Claim
138 words
A computer program product in a computer readable medium for validating test packets against a set of filter rules on a firewall between a secure computer network and a nonsecure computer network comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means for responsive to user input for validating a defined test packet against a set of filter rules in the firewall; and means responsive to failure of the test packet in the validating step for displaying a filter rule in the set of filter rules which denied the test packet.
Claim 21
Dependent Claim
44 words
The product as recited in claim 15, further comprising presenting a list of filter rules from the set of filter rules, wherein the filter rule which denied the test packet is presented in a different manner than other filter rules in the presented list.
Claim 22
Dependent Claim
57 words
The product as recited in claim 16, further comprising means for presenting a graphical bar representing the set of filter rules, wherein a distance that the packet traveled in the set of filter rules is indicated by changing the presentation of the graphical bar at a position representative of the filter rule which denied the test packet.
Claim 23
Dependent Claim
31 words
The product as recited in claim 15 further comprising; means for retrieving a plurality of test packets from memory; and means for running the validating and displaying steps in batch mode.
Claim 24
Dependent Claim
38 words
The product as recited in claim 16 further comprising: means responsive to user input for selecting a filter rule it the presented list; and means responsive to user input for performing an action on the selected filter rule.
Claim 25
Dependent Claim
160 words
A computer program product in a computer readable medium for validating test packets against a set of filter rules for a firewall computer between a secure computer network and a nonsecure computer network, comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means for responsive to user input for running a query on a test packet to determine whether any filter rules share attributes with the test packet; means displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and means responsive to user input for performing an action on a selected filter rule.
Claim 26
Dependent Claim
160 words
A computer program product in a computer readable medium for validating test packets against a set of filter rules for a firewall computer between a secure computer network and a nonsecure computer network, comprising: means for presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; means for responsive to user input for running a query on a test packet to determine whether any filter rules share attributes with the test packet; means displaying results of the query in a scatter bar representing a set of filter rules, wherein locations of matching filter rules are indicated by lines through the scatter bar; and means responsive to user input for performing an action on a selected filter rule.
Claim 27
Dependent Claim
76 words
The product as recited in claim 20 further comprising: means for displaying a list of filter rules, wherein the matching filter rules are displayed in a different manner than nonmatching filter rules; and means for displaying a small bar proximate to the scatter bar, the small bar indicating a portion of the set of filter rules displayed as the list of filter rules relative to a complete list of tunnel definitions represented by the scatter bar.
Claim 28
Independent Claim
130 words
A method for validating test packets against a set filter rules for a firewall between a secure computer network and a nonsecure computer network comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, validating a defined test packet against a set of filter rules in the firewall; and responsive to failure of the test packet in the validating step, displaying a subset of filter rules which passed the packet and a filter rule which denied the test packet.
Claim 29
Independent Claim
130 words
A method for validating test packets against a set filter rules for a firewall between a secure computer network and a nonsecure computer network comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, validating a defined test packet against a set of filter rules in the firewall; and responsive to failure of the test packet in the validating step, displaying a subset of filter rules which passed the packet and a filter rule which denied the test packet.
Claim 30
Dependent Claim
35 words
The method as recited in claim 22 wherein the displaying step shows a graphical display of the filter rule which denied the test packet and the subset of filter rules through which the packet passed.
Claim 31
Dependent Claim
15 words
The method as recited in claim 22 wherein a test packet can be incompletely defined.
Claim 32
Independent Claim
128 words
A method for validating test packets against a set of filtering for a firewall computer between a secure computer network and a nonsecure computer network, comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, running a query on a test packet to determine whether which ones of a set of filter rules share attributes with the test packet; and displaying results of the query showing matching filter rules in a different manner from nonmatching filter rules.
Claim 33
Independent Claim
128 words
A method for validating test packets against a set of filtering for a firewall computer between a secure computer network and a nonsecure computer network, comprising the steps of: presenting a user interface in which a test packet can be defined, wherein the user interface includes means for defining values for attributes of the test packet, wherein the attributes of the test packet are selected from a set of attributes of normal packets normally sent between the secure and nonsecure computer networks; responsive to user input, running a query on a test packet to determine whether which ones of a set of filter rules share attributes with the test packet; and displaying results of the query showing matching filter rules in a different manner from nonmatching filter rules.
Claim 34
Dependent Claim
37 words
The method as recited in claim 25 wherein the displaying step presents a graphical display of the set of filter rules, wherein representations of matching filter rules are presented in a different manner than nonmatching filter rules.
Claim 35
Dependent Claim
62 words
The method as recited in claim 26 wherein the set of filter rules is presented as a list of filter rules wherein matching filter rules are presented in a different manner than nonmatching filter rules and the method further comprises the step of responsive to user selection of a filter rule in the list, performing an action on the selected filter rule.
References Cited (Backward Citations)
US5634005A
Cited
US5835726A
Cited
US5623601A
Cited
US5793982A
Cited
US5826014A
Cited
US5884033A
Cited
US5727950A
Cited
US5778174A
Cited
US5889958A
Cited
US5864666A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-27 | 2003-06-28 | 2003-12-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-27 | 2007-06-28 | 2007-12-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-27 | 2011-06-28 | 2011-12-28 | $7700.00 | Window Closed / Lapsed |