Statefull Firewall

[ihenock101]

Dear all

  I am new to Firewall Technologies and I want to ask Regardless of statefull Firewall feature. A statefull firewall maintains the tcp state and knows a user session so why do we need to allow a user to allow in both direction incoming and outgoing for same traffic if the state is already known when the user requests the session is known and the firewall knows for the returning also 

[the_rock · Accepted solution]

Think of it in this context...say you want to allow users access to the Internet through the firewall. In that case, you ONLY need outbound rule, since it would be stateful connection, as its tcp, since udp is stateless.

[PhoneBoy]

Please provide a precise example where it is required to allow traffic in both directions.
For the vast majority of traffic, this shouldn't be necessary.

[_Val_]

You can start with this: https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/Principles-of-Check-Point-Architec...

Stateful FWs are explained there. 

[_Val_]

Also, moved to the general area.