topic Re: IPS packet or content filter in Network Security

IPS packet or content filter

pbogaerts — Sun, 10 Mar 2019 10:53:30 GMT

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what is an IPS doing packet or content filtering ?

Re: IPS packet or content filter

skornilov_cco — Mon, 03 Dec 2007 14:23:33 GMT

IPS v.5.x perform both type of filtering.

Re: IPS packet or content filter

attmidsteam — Tue, 04 Dec 2007 18:40:07 GMT

IDS/IPS devices are not firewalls and do not perform packet & content filtering (unless you stretch the definition and create a signature looking for specific keywords which blocks in-line).

Stateful means that the firewall tracks connections and allows reply traffic without checking an ACL:

http://en.wikipedia.org/wiki/Stateful_firewall

Content filtering devices examine the data stream and make a determination if the content of the traffic is allowed (ex: blocking unsafe for work websites):

http://en.wikipedia.org/wiki/Content_filter