Methods, systems, and computer program products for network firewall policy optimization

摘要

Methods, systems, and computer program products for firewall policy optimizationare disclosed. According to one method, a firewall policy including an orderedlist of firewall rules is defined. For each rule, a probability indicating a likelihoodof receiving a packet matching the rule is determined. The rules are sorted inorder of non-increasing probability in a manner that preserves the firewallpolicy.