8.1 firewall

How does a packet filtering firewall differ from a circuit-level gateway?

A circuit-level gateway is a type of firewall. Circuit-level gateways work at the session layer of the OSI model, or as a "shim-layer" between the application layer and the transport layer of the TCP/IP stack. They monitor TCP handshaking between packets to determine whether a requested session is legitimate.

What is the difference between a proxy and a reverse proxy?

In most cases, reverse proxy servers also act as load balancers for the servers behind it. ... But in the case of reverse proxy servers, client requests that go through them normally originate from the Internet, while, in the case of forward proxies, client requests normally come from the internal network behind them.

Which security device might you choose to restrict access by user account?

In most cases, reverse proxy servers also act as load balancers for the servers behind it. ... But in the case of reverse proxy servers, client requests that go through them normally originate from the Internet, while, in the case of forward proxies, client requests normally come from the internal network behind them.

What types of filter criteria can an application layer firewall use for filtering?

Network layer firewalls, also called packet filters, operate at a relatively low level of the TCP/IP protocol stack, not allowing packets to pass through the firewall unless they match the established rule set.

Why is a packet filtering firewall a stateless device?

To influence which packets are allowed to transit the system and to apply special actions to packets as necessary, you can configure stateless firewall filters. A stateless firewall specifies a sequence of one or more packet-filtering rules, called filter terms.