How will an SPI firewall handle a packet containing a TCP segment which is an acknowledgement?
A)process it through the ACL
B)pass it if it is part of an approved connection
C)both A and B
D)neither A nor B

Question

Quizplus · Accepted Answer

An SPI firewall is stateful and keeps track of connection state information. Therefore, it will only allow incoming TCP segments that are a part of an established and approved connection. So, when an acknowledgement packet is received, the firewall will check whether it belongs to an approved connection and will pass it accordingly. The firewall does not need to process the acknowledgement packet through the ACL as it is not a new connection attempt.

How Will an SPI Firewall Handle a Packet Containing a TCP