Abstract: An electronic communication network includes a connectivity subsystem. The connectivity subsystem registers a control subsystem with the connectivity subsystem. The control subsystem requests that network traffic be redirected from the connectivity subsystem to the control subsystem. In response to the request, the connectivity subsystem redirects network traffic from the connectivity subsystem to the control subsystem.

Abstract: A system and method for extending the implementation of one or more Intrusion Prevention Systems (IPSs) such that each user can be placed in the IPS traffic path to create secure containment areas at a granular level, port types and port counts are increased, and higher network connection speeds are supported. In different embodiments of the invention, traffic load is balanced across two or more IPSs, enabling enhanced availability during system failures, replacements or updates. IPS performance is improved by enhancing traffic management of “trusted” (e.g., pass-through) and “known bad” (e.g., discarded) traffic flows and decreasing configuration task workloads. Other embodiments of the invention include, but are not limited to, extending the implementation of proxy devices, virtual private networks (VPNs), session border controllers (SBCs), firewalls, protocol gateways and other bump-in-the-wire systems.

Abstract: An electronic communication network includes a connectivity subsystem. The connectivity subsystem registers a control subsystem with the connectivity subsystem. The control subsystem requests that network traffic be redirected from the connectivity subsystem to the control subsystem. In response to the request, the connectivity subsystem redirects network traffic from the connectivity subsystem to the control subsystem.

Abstract: A system and method for extending the implementation of one or more Intrusion Prevention Systems (IPSs) such that each user can be placed in the IPS traffic path to create secure containment areas at a granular level, port types and port counts are increased, and higher network connection speeds are supported. In different embodiments of the invention, traffic load is balanced across two or more IPSs, enabling enhanced availability during system failures, replacements or updates. IPS performance is improved by enhancing traffic management of “trusted” (e.g., pass-through) and “known bad” (e.g., discarded) traffic flows and decreasing configuration task workloads. Other embodiments of the invention include, but are not limited to, extending the implementation of proxy devices, virtual private networks (VPNs), session border controllers (SBCs), firewalls, protocol gateways and other bump-in-the-wire systems.

Abstract: An arrangement where a primary traffic management device includes ports that are connected to a network, and a backup device that is connected to the primary device and also to the network provides effective backup support. When a port of the primary become non-operational, a port of the backup device is enlisted to serve the function of the non-operational port, leaving the remaining port of the primary, as well as all of the processors to continue operating normally, employing whatever data has been accumulated in the primary. The enlisting is accomplished through a Layer 2 switch within the primary device and a Layer 2 switch within the secondary device.

Abstract: In illustrative embodiments, equivalent network processing of packets is performed at a single node instead of at a large number of special purpose nodes. A single-pass pipelined packet scan at the single node permits required actions to be taken in an integrated manner to avoid repetitive processing. Processing is conveniently accomplished in separate stateless and stateful segments, with state-related information derived during the stateless packet scan segment tagged to processed packets as required for subsequent stateful processing.