Last Updated on August 1, 2021 by Admin 2
Which of the following occurs at Layer 7 of the OSI model?
- Packet filtering
- Stateful firewall operation
- Deep packet inspection
Stateful firewall operation occurs at Layer 3. This type of inspection monitors the TCP three-way handshake which occurs at Layer 3. Stateful firewalls, monitor the state of each TCP connection as well. When traffic is encountered, a stateful firewall first examines a packet to see if it is the result of a previous connection. Information about previous connections is maintained in the state table.
With a stateful firewall, a packet is allowed if it is a response to a previous connection. If the state table holds no information about the packet, the packet is compared to the access control list (ACL). Depending on the ACL, the packet will be forwarded to the appropriate host or dropped completely.
Packer filtering can be done based on IP addresses and port numbers. That means this type of filtering occurs at Layer 3 and 4.
VLANs filter traffic by MAC addresses, and as such operate at Layer 2 of the OSI model.
Objective: Network Concepts
Sub-Objective: Compare and contrast deep packet inspection with packet filtering and stateful firewall operation.