2.1.6.1. Procedure – Content vectoring with CF

1. A PNS proxy sends the traffic to be inspected to an appropriate CF rule group.

2. CF evaluates the router conditions of the rule group. If no condition is fulfilled, the action set as default (a default scanpath, or an ACCEPT/REJECT) is performed. Otherwise, the action/scanpath specified for the condition is followed.

3. The traffic is inspected by the module instances specified in the selected scanpath. A module instance can be used in multiple scanpaths, with different parameters in each one.

4. The processed traffic is returned to PNS.