enabling stateful inspection

Advanced search

[CPbier]

I want to (re-)enable statefull inspection on a few very busy firewalls. For some dark reason this has been disabled since the beginning of time. As the firewalls are all production I want to be sure that it can be enabled without interrupting the current traffic.

How to find out beforehand what traffic will be dropped?
What kind of connections did you see dropped because it was out of state?

I heard it happens sometimes with failovers etc.


Z.

[juve]

most out of state drops are in fact sessions that last for a long time without any traffic passing over them. Other traffic that can be dropped is traffic from badly written custom applications.

• Articles
• Knowledge base