Abstract: An exploit probability value is calculated for each of the plurality of signatures learned from a history of exploits against attributes. The exploit probability value represents a likelihood of a particular signature exploiting one or more attributes of the private network. The exploit probability value is sorted or ranked to prioritize which exploit signatures have the highest probability of occurrence. Only a predetermined number of selected exploit signatures with the highest probabilities are scanned in real-time for signature matching.

Abstract: Systems and methods for providing an HA IPsec VPN client. According to one embodiment, an IPsec tunnel is established by a client with a VPN gateway through a first interface. An IP address of the first interface is bound as the local endpoint of the tunnel and the IP address of the VPN gateway is bound as the remote endpoint of the tunnel. Responsive to detection by the client that a second interface of the client machine has been selected to serve as the local endpoint, an IP address of the second interface is bound as the local endpoint. An IP packet is transmitted by the client machine to the VPN gateway by generating an ESP packet including an encrypted form of the IP packet and encapsulating the ESP packet with an outer IP header including the IP address of the second interface.