<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Hi Yasir, in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/differences-between-stateful-and-stateless-firewall/m-p/2915434#M171806</link>
    <description>&lt;P&gt;Hi Yasir,&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Stateless firewalls (eg &lt;G class="gr_ gr_309 gr-alert gr_gramm undefined Grammar multiReplace" id="309" data-gr-id="309"&gt;a l3&lt;/G&gt; router )handle network &lt;G class="gr_ gr_7 gr-alert gr_gramm gr_disable_anim_appear undefined Punctuation only-del replaceWithoutSep" id="7" data-gr-id="7"&gt;traffic,&lt;/G&gt; and restrict or block packets based on source and destination addresses or other static values. They are not ‘aware’ of traffic patterns or data flows.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Stateful firewalls (eg ASA) maintains the state of the connection and 5 tuples for a particular flow: such as&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;UL class="unIndentedList"&gt;
&lt;LI&gt;Source IP address&lt;/LI&gt;
&lt;LI&gt;Source port (typically: any)&lt;/LI&gt;
&lt;LI&gt;Destination IP address&lt;/LI&gt;
&lt;LI&gt;Destination port (80 or 443)&lt;/LI&gt;
&lt;LI&gt;Destination protocol (typically TCP)&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;If you want the device to be acting as a true firewall then stateful is any day better as it tracks the connection till layer 4 but it comes with an overhead as compared to stateless FW.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Aditya&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;please rate helpful posts.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Sat, 12 Mar 2016 06:59:36 GMT</pubDate>
    <dc:creator>Aditya Ganjoo</dc:creator>
    <dc:date>2016-03-12T06:59:36Z</dc:date>
    <item>
      <title>Differences between Stateful and stateless firewall</title>
      <link>https://community.cisco.com/t5/network-security/differences-between-stateful-and-stateless-firewall/m-p/2915433#M171803</link>
      <description>&lt;P&gt;Differences between Stateful and stateless firewall..? which method is bettre and why..??&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 07:28:33 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/differences-between-stateful-and-stateless-firewall/m-p/2915433#M171803</guid>
      <dc:creator>yasir shaikh</dc:creator>
      <dc:date>2019-03-12T07:28:33Z</dc:date>
    </item>
    <item>
      <title>Hi Yasir,</title>
      <link>https://community.cisco.com/t5/network-security/differences-between-stateful-and-stateless-firewall/m-p/2915434#M171806</link>
      <description>&lt;P&gt;Hi Yasir,&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Stateless firewalls (eg &lt;G class="gr_ gr_309 gr-alert gr_gramm undefined Grammar multiReplace" id="309" data-gr-id="309"&gt;a l3&lt;/G&gt; router )handle network &lt;G class="gr_ gr_7 gr-alert gr_gramm gr_disable_anim_appear undefined Punctuation only-del replaceWithoutSep" id="7" data-gr-id="7"&gt;traffic,&lt;/G&gt; and restrict or block packets based on source and destination addresses or other static values. They are not ‘aware’ of traffic patterns or data flows.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Stateful firewalls (eg ASA) maintains the state of the connection and 5 tuples for a particular flow: such as&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;UL class="unIndentedList"&gt;
&lt;LI&gt;Source IP address&lt;/LI&gt;
&lt;LI&gt;Source port (typically: any)&lt;/LI&gt;
&lt;LI&gt;Destination IP address&lt;/LI&gt;
&lt;LI&gt;Destination port (80 or 443)&lt;/LI&gt;
&lt;LI&gt;Destination protocol (typically TCP)&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;If you want the device to be acting as a true firewall then stateful is any day better as it tracks the connection till layer 4 but it comes with an overhead as compared to stateless FW.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Aditya&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;please rate helpful posts.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 12 Mar 2016 06:59:36 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/differences-between-stateful-and-stateless-firewall/m-p/2915434#M171806</guid>
      <dc:creator>Aditya Ganjoo</dc:creator>
      <dc:date>2016-03-12T06:59:36Z</dc:date>
    </item>
  </channel>
</rss>

