A preprocessor used in conjunction with a network firewall is disclosed.
The preprocessor creates a first index for identifying a plurality of
filters installed in the firewall. The preprocessor maintains statistics
including selected criteria and corresponding values for the installed
filters. When the value for the selected criteria exceeds a threshold
value, the preprocessor creates a second index and moves a subset of
filters from the first index to the second index.
