What is concept of statefull firewall?

[weerapatr]

Please clarify

TIA

[pciaccio]

A Firewall in general will filter packets dependant upon Layer 3 specifications. You can permit or block source and Dest IPs. However a Statefull Firewall goes to Layer 3 and above. You can now filter or perform certain tasks dependant upon the state of your traffic flow or your TCP/UDP ports and application you are using. This allows for a more granular filtering ability and if set up correctly can prevent virus' and intrusions, DOS, DDOS attacks along with other preventions. Today all firewalls (at least the ones I know) are statefull firewalls...Please rate...

[iraban]

I have done my CCIE secuity written, I am compltely aware of what a statful packet inspection is all about.

I need to know what vendor or product will fulfill the criteria

thanks for your post though

[abdel_n]

Hi,

To have a complete idea about what is stateful firewall it?s very important to understand what differ this technology from others.

Here is the explanation of the three main firewall technologies:

Stateful inspection - Stateful inspection firewalls, also known as stateful packet filters, allow/deny traffic based on source destination and service while maintaining a state table to keep track of existing connections. This ensures that inbound connections are valid replies to outbound requests.

Proxy - Connections are initiated on the firewall on behalf of the requester. Traffic does not pass through a proxy-based firewall but rather is recreated by the firewall, this type of technology works at the application layer.

Packet filtering - Inspects the incoming and outgoing packets and allows/denies traffic based on source, destination, protocol, and service.

[iraban]

I have done my CCIE secuity written, I am compltely aware of what a statful packet inspection is all about.

I need to know what vendor or product will fulfill the criteria

thanks for your post though

[Patrick Iseli]

Probably 95% of all vendor firewalls are stateful by now.

The trend is more going in direction of more application awareness as IDS/IPS features up to layer 7.

Sateful firewalls:

- Cisco: PIX, FWSM, IOS FW

- CheckPoint: NGX

- Junipers FW

- Astaro, Watchguard,

sincerely

Patrick