Abstract: A system and computer program product for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service are provided by one or a plurality of DHCP servers in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The system implemented in hardware, comprises a computer infrastructure operable to define one or a plurality of groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks. The computer infrastructure is further operable to retrieve information related to resources, in particular IP addresses, allocated within a DHCP server to each group of subnetworks. The computer infrastructure is further operable to transfer the information to a DHCP service monitoring system, the DHCP service monitoring system comprising means for retrieving the information from the one or a plurality of DHCP servers and means for aggregating the information for each group of subnetworks.

Abstract: Described is a system and method for receiving an electronic mail including an attachment file and separating the attachment file from the electronic mail. The attachment is then sent to a remote source and the attachment file is replaced with a substitute file including identifying data for retrieving the attachment file from the remote source. The electronic mail with the substitute file is then forwarded to a receiver.

Abstract: A system and computer program product for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service are provided by one or a plurality of DHCP servers in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The system implemented in hardware, comprises a computer infrastructure operable to define one or a plurality of groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks. The computer infrastructure is further operable to retrieve information related to resources, in particular IP addresses, allocated within a DHCP server to each group of subnetworks. The computer infrastructure is further operable to transfer the information to a DHCP service monitoring system, the DHCP service monitoring system comprising means for retrieving the information from the one or a plurality of DHCP servers and means for aggregating the information for each group of subnetworks.

Abstract: A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers (602) in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server (602) defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (600).

Abstract: A method and system for enabling interconnection of VPNs is disclosed. An interconnection device manages an interconnection process at one or more facilities including, for example, a gateway device. The gateway device has information relating to a plurality of VPNs, and may facilitate interconnection between devices on at least two of the VPNs by determining that one device is in fact a member of a first one of the VPNs, and by forwarding connection parameters of the first VPN to the second VPN on an as-needed basis. In this way, the gateway allows interconnection without the need for a completely centralized decision-making process, and does so independently of the type of device and/or VPN(s) being used. Moreover, the gateway may implement only those VPN parameters needed by both VPNs to communicate with one another with a desired level of security, thereby simplifying the routing and forwarding processes associated with the actual communication occurring via the interconnection.

Abstract: A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers (602) in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server (602) defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (600).

Abstract: A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers (602) in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server (602) defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (600).

Abstract: A method and system for preventing unauthorized dynamic host configuration servers from responding to client configuration requests in an Internet Protocol (IP) network. In accordance with the method of the present invention multiple network clients are simulated within a server checker client. At least one unauthorized dynamic host configuration server is then detected utilizing the server checker client within said IP network. Upon detection of an unauthorized dynamic host configuration server, configuration requests are delivered from the server checker client to the detected unauthorized dynamic configuration server such that the unauthorized dynamic host configuration server is unable to respond to configuration requests from actual network clients.

Abstract: The present invention relates to a system and method of dispatching an IP datagram comprising socks traffic on a socks server, in an Internet Protocol (IP) network comprising a plurality of socks servers, the IP datagram comprising an IP header comprising a Type Of Service (TOS) field. The method comprises in a socks dispatcher the steps of retrieving the value of the Type Of Service (TOS) field from the IP header of the IP datagram and selecting a socks server referring to a first table, said first table defining for each value of the TOS field one or a plurality of socks servers. The IP datagram is sent by an IP network device with a given priority. The step of retrieving the value of the Type Of Service (TOS) field is followed by the further step of determining the priority of the IP datagram by referring to a second table, the second table defining a priority for each value of the Type Of Service (TOS) field.

Abstract: A method and system for setting a value within a type of service field in an Internet Protocol (IP) datagram in accordance with an application level protocol at which said IP datagram is transported within a socks connection from a source application that resides within a source device to a destination application that resides within a destination device. The method includes determining IP addresses of the source and destination devices. The application level protocol for the source and destination devices are then determined utilizing the port addresses to which and from which the IP datagram is sent. The IP addresses for the source and destination nodes as well as the identity of the application level protocols corresponding to the source and destination applications are then indexed in a first table. A type of service value to be encoded within the IP datagram is then determined and written into the type of service field of the IP datagram.

Abstract: A method and system are disclosed for generating and using a virus-free file certificate integrated in a file.

Abstract: An access device for establishing a Systems Network Architecture (SNA) session between an SNA Client and an SNA application using Telnet 3270 services over a communication network. The communication network, has Telnet 3270 servers for accessing the SNA application. The access device comprises logic for: (1) receiving from a Telnet 3270 client, a request for establishing a Telnet 3270 session with a Telnet 3270 Server, the request comprising an identification of the SNA client associated with the Telnet 3270 client, (2) selecting a communication path within the communication network to access a Telnet 3270 server providing services to the SNA client by referring to a configuration table, which comprising, for each SNA client, one or more communication paths leading to one or more Telnet 3270 servers, and (3) forwarding the Telnet 3270 session request to a selected Telnet 3270 server along the selected communication path.

Abstract: The present invention is directed to computer viruses and more particularly to a method and system for use in a virus-free certificate firewall, of controlling and filtering files using a virus-free certificate.

Abstract: A method and system as disclosed for use in a virus-free certificate proxy (107, 801), of retrieving from one or a plurality of virus-free certificate authorities (104, 804) a virus-free certificate (200) certifying that a file is virus-free. The method includes the steps of: receiving (1001) virus-free certificate request for a file; selecting a virus-free certificate authority (104, 804) having authority to generate a virus-free certificate (200) for the file; requesting (1003 . . . 1007) the virus-free certificate to the selected virus-free certificate authority (104, 804); receiving (1003 . . . 1007) from the selected virus-free certificate authority the generated virus-free certificate; sending back (1005) in response to the virus-free certificate request the received virus-free certificate.

Abstract: The present invention is directed to computer networks and more particularly to a system and method in a network device for caching Hyper Text Transfer Protocol (HTTP) data transported in an Internet Protocol (IP) Datagram sent on a socks connection established over a Transmission Control Protocol (TCP) connection between a source port on a source device and a destination port on a destination device.

Abstract: A method and system are disclosed for generating and using a virus-free file certificate. The method, for use in a virus-free certificate authority (102), includes the steps of: receiving (300) a virus-free certificate request for a file from a server (101) or a client (100) system; determining (301) whether the file is virus-free or not; if the file is declared virus-free by the virus-free certificate authority (102): generating (303, 304) a virus-free certificate (200) including a file signature (207) for certifying that said file is declared virus-free by the virus-free certificate authority (102); sending (306) back in response to the virus-free certificate request the virus-free certificate (200).

Abstract: The present invention relies on dynamic autoproxy configuration and more particularly to a method and system for selecting a Proxy/Socks Server according to some response time and availability criteria. It rests on a dynamic autoproxy mechanism using availability and response time probes. It relies on probes retrieving well known HTML pages through each Proxy/Socks Server, measuring associated response time, detecting Proxy/Socks failures and degradation of response time. It also uses a CGI (Common Gateway Interface) program for dynamically creating autoproxy code (in a preferred embodiment Javascript code) on an autoproxy URL (Universal resource locator) system for selecting said Proxy/Socks Server.

Abstract: The present invention relates to computer viruses and more particularly to a method and system for caching anti-virus file certificates. Each anti-virus certificate associated with a file comprises a file signature. The file signature is generated by a virus-free certificate authority, which avoids the system, which receives the file to check this file for all existing viruses. The virus-free certificate authority validates the file against all known viruses, using one or several anti-virus checkers. In case of new viruses, only the virus-free certificate authority is changed and the only process performed by the system receiving the file is to verify the file against the file signature included in the virus-free certificate, and to filter the file according predetermined rules. The present invention drastically simplifies the computing resources for detecting viruses on network devices such as IP Routers and Firewalls.

Abstract: The present invention relates to a method and system for dispatching on a socks server an IP datagram originated from an application on a source device, in an Internet Protocol (IP) network comprising a plurality of socks servers, said IP datagram comprising a Source IP Address field in the IP header, a Source Port field in the Transmission Control Protocol (TCP) header, and socks data.

Abstract: The present invention relates to the transmission of Systems Network Architecture (SNA) information through the Internet Protocol (IP) network, and more particularly to a method and system for an SNA application user to locally select a target application at its current location and to launch a preferred (or the more appropriate) Telnet 3270 Client to access this target application in a one-step process.