When the NBA passes an object to a policy engine for analysis, it forwards all associated data packets onto the receiving computer, except for the final packet in the stream. Then, when policy processing is complete, it receives a 'block' or 'allow' action.
If the NBA receives an 'allow' action, it releases the final packet to its destination. The receiving computer can then complete the transaction, for example, an email send operation, or an HTTP Post operation.
|
Copyright © 2014 CA.
All rights reserved.
|
|