Stateful Inspection

bharath917

Hi All,

I have doubt in stateful inspection, As per checkpoint "Stateful Inspection technology implements all necessary firewall capabilities between the data and network layers. Packets are intercepted at the network layer for best performance (as in packet filters), but the data derived from layers 3-7 is accessed and analyzed for improved security".

As per my understanding stateful inspection checks source and Destination IP address, ports, flags, sequence numbers and it also understands the context of communication but when exactly it checks the data upto Layer 7. Does it checks for all new packets,
Can anyone explain???

Regards,
Bharath