Abstract: A method for providing authoritative application-based routing and an improved application firewall, as well as a method for application classification, is described. The first embodiment, which provides a method for authoritative application-based routing, comprises tagging packets with an application identifier, and pushing the tagged packets to the network to enable the application identifier to be used in routing and priority decisions. In the second embodiment, a method for improving application firewall comprises using the application identifier to minimize the amount of processing required by the firewall when analyzing packet information.

Abstract: A method for providing authoritative application-based routing and an improved application firewall, as well as a method for application classification, is described. The first embodiment, which provides a method for authoritative application-based routing, comprises tagging packets with an application identifier, and pushing the tagged packets to the network to enable the application identifier to be used in routing and priority decisions. In the second embodiment, a method for improving application firewall comprises using the application identifier to minimize the amount of processing required by the firewall when analyzing packet information.

Abstract: A method for providing authoritative application-based routing and an improved application firewall, as well as a method for application classification, is described. The first embodiment, which provides a method for authoritative application-based routing, comprises tagging packets with an application identifier, and pushing the tagged packets to the network to enable the application identifier to be used in routing and priority decisions. In the second embodiment, a method for improving application firewall comprises using the application identifier to minimize the amount of processing required by the firewall when analyzing packet information.

Abstract: An ultra-wideband antenna is provided. The antenna includes a cone shaped ground element and a radiating element. The cone shaped ground element has a first vertex region and an aperture formed through the first vertex region. The cone shaped ground element is configured to form an electrical ground. The radiating element includes a cone shaped radiator and a spherical shaped radiator. The cone shaped radiator has a second vertex region that is electrically connectable to a feed element mounted through the aperture of the cone shaped ground element. The spherical shaped radiator is mounted to the cone shaped radiator opposite the second vertex region.

Abstract: A method for providing authoritative application-based routing and an improved application firewall, as well as a method for application classification, is described. The first embodiment, which provides a method for authoritative application-based routing, comprises tagging packets with an application identifier, and pushing the tagged packets to the network to enable the application identifier to be used in routing and priority decisions. In the second embodiment, a method for improving application firewall comprises using the application identifier to minimize the amount of processing required by the firewall when analyzing packet information.

Abstract: Flow-based data compression is achieved by selecting which of a set flows are compressed, which packets within each flow are compressed, and the level of effort applied to compress each packet. Compression scheduling across multiple flows excludes certain packets in respective flows from compression by way of skip patterns in a table or that are generated by a geometrically progressive skip scheme. Compression scheduling may include adjusting the level of compression effort.

Abstract: Techniques are provided for transmitting data securely across virtual private network (VPN) connections. A first VPN connection is initiated between a first device and a second device. The second device selects a first communication protocol to be used for the first VPN connection with the first device. The first device generates session identification data associated with the first VPN connection and sends the session identification data to the second device over the first VPN. The second device receives the session identification data and stores it. The second device determines when the first VPN connection has been disrupted. The second device then selects a second communication protocol and initiates a second VPN connection using the second communication protocol with the first device. The second device transmits the session identification data to the first device, and the first device associates the second VPN connection with the first VPN connection using session identification data.

Abstract: Flow-based data compression is achieved by selecting which of a set flows are compressed, which packets within each flow are compressed, and the level of effort applied to compress each packet. Compression scheduling across multiple flows excludes certain packets in respective flows from compression by way of skip patterns in a table or that are generated by a geometrically progressive skip scheme. Compression scheduling may include adjusting the level of compression effort.

Abstract: Techniques are provided for transmitting data securely across virtual private network (VPN) connections. A first VPN connection is initiated between a first device and a second device. The second device selects a first communication protocol to be used for the first VPN connection with the first device. The first device generates session identification data associated with the first VPN connection and sends the session identification data to the second device over the first VPN. The second device receives the session identification data and stores it. The second device determines when the first VPN connection has been disrupted. The second device then selects a second communication protocol and initiates a second VPN connection using the second communication protocol with the first device. The second device transmits the session identification data to the first device, and the first device associates the second VPN connection with the first VPN connection using session identification data.

Abstract: A method, apparatus and computer program product for performing client-side Java content transformation is presented. A first client request is received at a gateway from a web client, and is transmitted from the gateway to a web server, and then the web page is received at the gateway from the web server. At the gateway, the web page is modified to request a content transformation application and is transmitted from the gateway to the web client. A request is received at the gateway for the content transformation application, and the gateway transmits the content transformation application to the client. The content transformation application is run on the client, wherein the content transformation application acquires the applet requested by the client and performs content translation on the applet, resulting in a content transformed applet, which is then run by the client.

Abstract: A method, and computer program product for providing dynamically tunneling over an unreliable protocol or a reliable protocol based on network conditions is presented. A connection between a source device and a destination device is established using a reliable protocol. An attempt is then made to utilize an unreliable protocol to communicate between the source device and the destination device. When the attempt to utilize an unreliable protocol is successful, then the unreliable protocol is used to transmit data between the source device and the destination device. When the attempt to utilize the unreliable protocol is unsuccessful, then the reliable protocol connection is used to transmit data between the source device and the destination device.

Abstract: A method, apparatus and computer program product for performing client-side Java content transformation is presented. A first client request is received at a gateway from a web client, and is transmitted from the gateway to a web server, and then the web page is received at the gateway from the web server. At the gateway, the web page is modified to request a content transformation application and is transmitted from the gateway to the web client. A request is received at the gateway for the content transformation application, and the gateway transmits the content transformation application to the client. The content transformation application is run on the client, wherein the content transformation application acquires the applet requested by the client and performs content translation on the applet, resulting in a content transformed applet, which is then run by the client.

Abstract: An efficient technique for recovering multiple connections detects a connection failure affecting multiple clients, selects one of the number of affected clients, repeatedly attempts to reestablish the failed connection between the selected client and the server until the connection is successfully re-established, and then re-establishes the connections for the remaining clients.

Abstract: An efficient technique for recovering multiple connections detects a connection failure affecting multiple clients, selects one of the number of affected clients, repeatedly attempts to reestablish the failed connection between the selected client and the server until the connection is successfully re-established, and then re-establishes the connections for the remaining clients.