[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

stateful packet inspection -- relation to clients' computer security

Posted on 2009-07-02
2
Medium Priority
?
272 Views
Last Modified: 2012-05-07
What does the "state" of a TCP/IP packet have to do with whether it is from a user-requested web site, or from a hacker trying to gain access to a client computer, with reagrd to the "stateful packet inspection" that presumably only hardware firewalls are capable of?
0
Comment
Question by:Casey Claassen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 32

Accepted Solution

by:
rsivanandan earned 140 total points
ID: 24765085
To simply look at it,

If the packet coming from outside

1. Has SYN and ACK bit set then it means that the connection was indeed originated from the inside machine and that is why acknowledgment is coming.

2. After that every packet passed has sequence numbers which are math bound and has relation with the packet sent.

So keeping the state information helps find it.

Now if a hacker sends a reply packet with 'syn' and 'ack' bit set, the machine won't entertain it since it didn't originate that traffic at all.

Does that help?

Cheers,
Rajesh
0
 

Author Closing Comment

by:Casey Claassen
ID: 31599172
Yes, that does indeed help!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question