In ingress and egress filtering, an SPI firewall always considers its ACL rules when a new packet arrives that does not attempt to open a connection.

Question

Quizplus · Accepted Answer

An SPI (Stateful Packet Inspection) firewall makes decisions based on the context of the traffic (state of the connection) rather than strictly adhering to ACL (Access Control List) rules for every packet, especially for packets that are part of an existing connection.

In Ingress and Egress Filtering, an SPI Firewall Always Considers