Abstract: Methods and apparatus for forming apertures in a solid state membrane using dielectric breakdown are provided. In one disclosed arrangement a plurality of apertures are formed. The membrane comprises a first surface area portion on one side of the membrane and a second surface area portion on the other side of the membrane. Each of a plurality of target regions comprises a recess or a fluidic passage opening out into the first or second surface area portion. The method comprises contacting all of the first surface area portion of the membrane with a first bath comprising ionic solution and all of the second surface area portion with a second bath comprising ionic solution. A voltage is applied across the membrane via first and second electrodes in respective contact with the first and second baths comprising ionic solutions to form an aperture at each of a plurality of the target regions in the membrane.

Abstract: An improved firewall for providing network security is described. The improved firewall provides for dynamic rule generation, as well using conventional fixed rules. This improvement is provided without significant increase in the processing time required for most packets. Additionally, the improved firewall provides for translation of IP addresses between the firewall and the internal network.

Abstract: An improved firewall for providing network security is described. The improved firewall provides for dynamic rule generation, as well using conventional fixed rules. This improvement is provided without significant increase in the processing time required for most packets. Additionally, the improved firewall provides for translation of IP addresses between the firewall and the internal network.

Abstract: Methods, systems and business models are provided for hosted services for network security appliances. According to one embodiment an analysis and management network provides secure access and analysis of centralized logs. The analysis and management network may also support delivery, viewing and reporting of network security related activities as well as support configuration and management of network security appliances via a communications network, such as the Internet.

Abstract: A logging device, system and a method for managing network packets. The logging device includes a traffic capturing device receiving the network packets and filtering the network packets by selecting some of the network packets based on a predefined criteria. The logging device also includes a storage device storing the selected network packets and an analyzing component organizing the stored network packets in accordance with a user specified parameters. The traffic capturing component, the storage component, and the analyzing component are integrated in a single physical device providing a user with an ability to monitor real-time network traffic on the fly. The traffic capturing component selects the network packets for storage based on source and destination addresses of the network packets, based on a protocol of the network packets, based on a port designated, and based on whether a particular traffic session matches a predetermined signature.

Abstract: An improved firewall for providing network security is described. The improved firewall provides for dynamic rule generation, as well using conventional fixed rules. This improvement is provided without significant increase in the processing time required for most packets. Additionally, the improved firewall provides for translation of IP addresses between the firewall and the internal network.

Abstract: Systems and methods for network security including a firewall. One firewall includes a firewall engine. The firewall engine includes a first engine including a first set of rules for sorting incoming IP packets into initially allowed packets and initially denied packets. The firewall engine also includes a filter including a second set of rules for receiving and further sorting the initially denied packets into allowed packets and denied packets.