12-03-2007 01:53 AM - edited 03-10-2019 03:53 AM
I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what is an IPS doing packet or content filtering ?
12-03-2007 06:23 AM
IPS v.5.x perform both type of filtering.
12-04-2007 10:40 AM
IDS/IPS devices are not firewalls and do not perform packet & content filtering (unless you stretch the definition and create a signature looking for specific keywords which blocks in-line).
Stateful means that the firewall tracks connections and allows reply traffic without checking an ACL:
http://en.wikipedia.org/wiki/Stateful_firewall
Content filtering devices examine the data stream and make a determination if the content of the traffic is allowed (ex: blocking unsafe for work websites):
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide