METHODS, SYSTEMS, AND COMPUTER PROGRAM PRODUCTS FOR NETWORK FIREWALL POLICY OPTIMIZATION

摘要

Methods, systems, and computer program products for firewall policyoptimization are disclosed. According to one method, a firewall policyincluding an ordered list of firewall rules is defined. For each rule, aprobability indicating a likelihood of receiving a packet matching the rule isdetermined. The rules are sorted in order of non-increasing probability in amanner that preserves the firewall policy.