Abstract: A device and method for filtering network traffic is provided utilizing multiple filter tables. A first filter table is maintained in the form of a balanced binary tree that is manipulated by two processors in order to filter traffic between network segments. By initially filtering traffic based upon information contained within the balanced binary tree table, the processing and resource load on the system is significantly reduced. Traffic whose source or destination is not contained within the balanced binary tree table is forwarded to a second processor for filtering based upon a second filter table.