Security device, system and method

The invention relates to a security device, system and method. Techniques for sharing of network session data are described. The techniques may enable security devices to leverage application classification information in a federated manner. An example security device includes a memory and one or more processors. The processor(s) are configured to receive data representative of an application classification for a first packet flow from a second security device, to receive data of a second packet flow, and, when the second packet flow corresponds to the first packet flow, to monitor the data of the second packet flow based on the application classification for the first packet flow without determining an application classification for the second packet flow. 本发明涉及种安全设备、系统和方法，描述了用于共享网络会话数据的技术。该技术可以使安全设备能够以联合方式利用应用分类信息。示例安全设备包括存储器和个或多个处理器。处理器配置为：从第二安全设备接收表示用于第分组流的应用分类的数据；接收第二分组流的数据；以及当第二分组流对应于第分组流时，基于用于第分组流的应用分类来监控第二分组流的数据，而不确定对第二分组流的应用分类。