topic Re: Statefull Firewall in Firewall and Security Management

Statefull Firewall

ihenock101 — Tue, 26 Jul 2022 13:34:17 GMT

Dear all

I am new to Firewall Technologies and I want to ask Regardless of statefull Firewall feature. A statefull firewall maintains the tcp state and knows a user session so why do we need to allow a user to allow in both direction incoming and outgoing for same traffic if the state is already known when the user requests the session is known and the firewall knows for the returning also

Re: Statefull Firewall

the_rock — Tue, 26 Jul 2022 13:47:24 GMT

Think of it in this context...say you want to allow users access to the Internet through the firewall. In that case, you ONLY need outbound rule, since it would be stateful connection, as its tcp, since udp is stateless.

Re: Statefull Firewall

PhoneBoy — Tue, 26 Jul 2022 14:31:42 GMT

Please provide a precise example where it is required to allow traffic in both directions.
For the vast majority of traffic, this shouldn't be necessary.

Re: Statefull Firewall

_Val_ — Tue, 26 Jul 2022 14:33:17 GMT

You can start with this: https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/Principles-of-Check-Point-Architecture/ba-p/87848?cat=3

Stateful FWs are explained there.

Re: Statefull Firewall

_Val_ — Tue, 26 Jul 2022 14:39:25 GMT

Also, moved to the general area.