by Perryman on February 16th, 2007

Perryman

Question

Help answer this question below.

What is stateful inspection?

  • Like
  • Report

Answers. Showing one answer.

  • by canadianhelper on February 16th, 2007

    canadianhelper

    Also referred to as dynamic packet filtering. Stateful inspection is a firewall architecture that works at the network layer. Unlike static packet filtering, which examines a packet based on the information in its header, stateful inspection tracks each connection traversing all interfaces of the firewall and makes sure they are valid. An example of a stateful firewall may examine not just the header information but also the contents of the packet up through the application layer in order to determine more about the packet than just information about its source and destination. A stateful inspection firewall also monitors the state of the connection and compiles the information in a state table. Because of this, filtering decisions are based not only on administrator-defined rules (as in static packet filtering) but also on context that has been established by prior packets that have passed through the firewall.

    As an added security measure against port scanning, stateful inspection firewalls close off ports until connection to the specific port is requested.

    Check Point Software is credited with coining the term stateful inspection in the use of its FireWall-1 in 1993.

    http://www.webopedia.com/TERM/S/stateful_inspection.html

    Comments
    • Like
    • Report

    No comments. Post one | Permalink

Want to attach an image to your answer? Click here.

Did this answer your question? If not, then ask a new question or create a poll.

You're reading What is stateful inspection?

Follow us on Facebook!

Related Ads