New answers tagged

6

Stateful firewall - A Stateful firewall is aware of the connections that pass through it. It adds and maintains information about a user's connections in a state table, referred to as a connection table. It then uses this connection table to implement the security policies for users connections. An example of the stateful firewall is PIX, ASA, Checkpoint. ...


21

Stateless means to make a decision (drop, accept, ...) solely based on a single packet without any further context. Stateful means to maintain some context information based on previous packets and include it when deciding on what to do with a packet. This context is about previously established connections (i.e. "real" connections like in TCP or ...


0

From my perspective, only deep packet inspection including SSL/TLS traffic will work. Common practice is to have a proxy server in internal network (with the SSL inspection) to allow users to access the internet (and block all unwanted sites / services) then block all traffic outgoing from such users directly to the internet. If you need to allow users to ...


32

You are almost correct. But stateful inspection allows you to have more control above data streams going through the firewall. A Cybrary article says: Stateless firewalls watch network traffic and restrict or block packets based on source and destination addresses or other static values. They’re not ‘aware’ of traffic patterns or data flows. A ...


1

Don't trust random devices to be secure. Instead, implement a firewall between 'the internet' and your device, and make sure to block this unrequired traffic at the firewall level. Apple have discontinued the product, and according to at least one chat thread there isn't a firmware upgrade to disable this, nor will one be forth coming. As a slight aside, ...


4

Someone in an interview today told me every firewall has two rules: explicit allow at the top and explicit block at the bottom. Form the way I've always understood things firewalls are normally set to explicitly block by default (or explicitly allow if changed). Is this true? If so, why? The explicit allow would not be an allow for everything, ...


1

You have a misunderstanding of the communication. The server is not assigning the high port (it’s not actually random), the client is the one doing the high port selection which in turn establishes the firewall permissions for that high port. Nor does the server assign a new port to get off of 80 (or whatever). It continues listening on 80. A “connection” ...


0

you can use AnyDesk (version 5.2+) which allow you to set up TCP connection between clients. I used it for connecting my client PC to a Team Foundation Server (TFS) over the internet. The server and client are behind NAT. I set the local and remote ports to '8080' and I can connect to server from client using this address on client: 'http://localhost:...


1

The answer to this question would be reliant on the capabilities of your 'nex-gen' firewall. If your ng-firewall offers the ability to perform deep packet inspection and detect and prevent web application vulnerabilities, you need to figure what the delta is for the ng-firewall with a waf. If both offers the same capabilities and have no significant delta, ...


0

You need to find out which network ports your application uses to communicate. Usually, firewalls do not support to choose some programs. The standard is to define source, destination and ports.


2

Without rules in place, your firewall affords no protection, even if enabled. It is common for a new installation of a Linux distribution to have iptables installed or even enabled without rules in place; adding the rules is left to the system owner, who knows which services they need to expose and which they need to protect. If you installed Debian where ...


0

The process firewalls - a resource access protection mechanism that inspects both the program and the system, might come handy for you. It works similar to network firewalls – an OS authorization system allows resource access based on the firewall rules.


Top 50 recent answers are included