Abstract: An auto fabric configuration (AFC) mode is provided to enable network elements, when added to a data communication network, to discover each other, using TLVs added to standard protocols. The AFC mode further allows for automatic configuration of the network fabric. For example, core features, such as link aggregation, Virtual Local Area Networks (VLANs) and Shortest Path Bridging (SPB) adjacencies, can be automatically configured.

Abstract: A system for collaborative deep packet inspection in a network uses a coarse grain mechanism to perform deep packet inspection on sample packets sampled from a plurality of traffic flows received at a network device using a plurality of signatures and develop a profile of the network and a fine grain mechanism to perform real-time inspection of a traffic flow against a small set of the signatures that is updated based on the profile. The fine grain mechanism further enables at least one policy action to be applied to a traffic flow when the traffic flow matches one of the signatures in the set of signatures.

Abstract: A method and apparatus for ensuring that important confidential or proprietary information is not inadvertently released through email and similar transmissions. When file security firewall resident on a file security server or another network node receives an email intended for transmission, it determines whether the file revision history should be removed from any attachments. If so, the email is buffered and the attachments are extracted for file revision history by a file revision history remover associated with the firewall or an available proprietary file revision history remover. Once the file revision history removal is attempted, successfully or unsuccessfully, a reformed email is created, including either the original attachments or, in their place, a version of the attachment from which file revision history has been removed.

Abstract: A network device for distributing authentication information between authorized nodes for purposes of concurrently “pre-authenticating” a mobile user at a plurality of points throughout a LAN is disclosed. When a client attempts to access the network through the network device, the network device attempts to authenticate the client based on the credentials presented by the user. If authenticated, the client is admitted into the network at the network device and the client's pre-authentication information transmitted to one or more network nodes associated with an authentication group. Upon receipt of the pre-authentication information, the one or more network nodes are authorized to admit the client into the network at those nodes in addition to the network device at which the client was initially authenticated, thereby concurrently pre-authorizing the client at multiple points across the network.

Abstract: An auto fabric configuration (AFC) mode is provided to enable network elements, when added to a data communication network, to discover each other, using TLVs added to standard protocols. The AFC mode further allows for automatic configuration of the network fabric. For example, core features, such as link aggregation, Virtual Local Area Networks (VLANs) and Shortest Path Bridging (SPB) adjacencies, can be automatically configured.

Abstract: A network device for distributing authentication information between authorized nodes for purposes of concurrently “pre-authenticating” a mobile user at a plurality of points throughout a LAN is disclosed. When a client attempts to access the network through the network device, the network device attempts to authenticate the client based on the credentials presented by the user. If authenticated, the client is admitted into the network at the network device and the client's pre-authentication information transmitted to one or more network nodes associated with an authentication group. Upon receipt of the pre-authentication information, the one or more network nodes are authorized to admit the client into the network at those nodes in addition to the network device at which the client was initially authenticated, thereby concurrently pre-authorizing the client at multiple points across the network.

Abstract: A method and apparatus for ensuring that important confidential or proprietary information is not inadvertently released through email and similar transmissions. When file security firewall resident on a file security server or another network node receives an email intended for transmission, it determines whether the file revision history should be removed from any attachments. If so, the email is buffered and the attachments are extracted for file revision history by a file revision history remover associated with the firewall or an available proprietary file revision history remover. Once the file revision history removal is attempted, successfully or unsuccessfully, a reformed email is created, including either the original attachments or, in their place, a version of the attachment from which file revision history has been removed.

Abstract: A network device for distributing authentication information between authorized nodes for purposes of concurrently “pre-authenticating” a mobile user at a plurality of points throughout a LAN is disclosed. When a client attempts to access the network through the network device, the network device attempts to authenticate the client based on the credentials presented by the user. If authenticated, the client is admitted into the network at the network device and the client's pre-authentication information transmitted to one or more network nodes associated with an authentication group. Upon receipt of the pre-authentication information, the one or more network nodes are authorized to admit the client into the network at those nodes in addition to the network device at which the client was initially authenticated, thereby concurrently pre-authorizing the client at multiple points across the network.