A Study of Security Policy Enforcement using Priority

This paper studies about the policy enforcement of security router platform with Intel IXP2800 network processor. IXP2800 network processor improves networking processing. Security router platform has packet filtering, intrusion detection and VPN functions. They are implemented at microengines of network processor. Security policy enforcement of router is implemented at Xscale core of network processor. Security router platform communicates the security policies with management system through COPS protocol. Security router platform analyzes the whole security conditions of network and preserves the network services from attacks according to policy. Security policies are packet filtering policy, intrusion detection policy, access control policy and VPN policy