topic Re: difference between stateful inspection and packet flow in General Topics

difference between stateful inspection and packet flow

Ranjeett_Ranjan — Tue, 14 Aug 2018 07:05:53 GMT

difference between stateful inspection and packet flow

Re: difference between stateful inspection and packet flow

_Val_ — Fri, 21 Jun 2019 09:08:06 GMT

Hi Ranjeett, Stateful Inspection is a major part of the packet from through a Security Gateway, but there are some other operations there too.

More details here: https://community.checkpoint.com/docs/DOC-3061-security-gateway-packet-flow-and-acceleration-with-diagrams

Re: difference between stateful inspection and packet flow

Jerry — Tue, 14 Aug 2018 07:54:12 GMT

vague question Stateful vs. Stateless FW is the answer:

A Stateful firewall is aware of the connections that pass through it. It adds and maintains information about a user's connections in a state table, referred to as a connection table. It then uses this connection table to implement the security policies for users connections. An example of the stateful firewall is PIX, ASA, Check Point.

Stateless firewalls - (Packet Filtering) Stateless firewalls, on the other hand, does not look at the state of connections but just at the packets themselves. An example of a packet filtering firewall is the Extended Access Control Lists on Cisco IOS Routers.

ps. sorry for the joke at the begining but I couldnt help it

Re: difference between stateful inspection and packet flow

G_W_Albrecht — Tue, 14 Aug 2018 08:51:36 GMT

Should that just be expressed as: Difference in packet flow when using statefull inspection ?

Re: difference between stateful inspection and packet flow

_Val_ — Tue, 14 Aug 2018 08:51:59 GMT

I took the question in the Check Point context exclusively. But thanks for helping, it might be we need a wider aspect.

Re: difference between stateful inspection and packet flow

Jerry — Tue, 14 Aug 2018 09:30:41 GMT

as my good mate (Daniel Lavi) from your PS said "simple answers are the most difficult to find"

Re: difference between stateful inspection and packet flow

_Val_ — Tue, 14 Aug 2018 10:13:44 GMT

Let's wait for topic starter to reply on this

Re: difference between stateful inspection and packet flow

siva_velu — Sat, 15 Dec 2018 12:59:17 GMT

Hi All,

If we disable the secure XL, Checkpoint firewall will act as stateless? Could you Pls confirm

The reason I am asking if we disable the secureXL all the packets will pass thorough the F2F layer so gateway doesn’t not have any cache/rememberance about connections state

Re: difference between stateful inspection and packet flow

_Val_ — Sun, 16 Dec 2018 10:27:12 GMT

Forgive me harsh words, but this is nonsense. Check Point firewall is always stateful, with or without acceleration.

Please refer to CP4B section of this forum and read Principles article there for more details