Hi Yasir,
Stateless firewalls (eg a l3 router )handle network traffic, and restrict or block packets based on source and destination addresses or other static values. They are not ‘aware’ of traffic patterns or data flows.
Stateful firewalls (eg ASA) maintains the state of the connection and 5 tuples for a particular flow: such as
- Source IP address
- Source port (typically: any)
- Destination IP address
- Destination port (80 or 443)
- Destination protocol (typically TCP)
If you want the device to be acting as a true firewall then stateful is any day better as it tracks the connection till layer 4 but it comes with an overhead as compared to stateless FW.
Regards,
Aditya
please rate helpful posts.
