Don,

1. how long does the firewall remember outbound packets, in order to match up inbound packets to requests? Does that depend on memory size of the firewall?

2. do the firewalls capture more than src/dest IP:Port info to apply a rule to? like HTTP protocol info - outbound request is a Get and should match an inbound packet that's a Get response, not just any packet from the dest:port address?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1870/622#622