状态检测防火墙墓本保持了早期包过滤防火墙、应用网关防火培的优点,性能较为完善,这种防火墙具有:检测IP包的每个字段的能力并遵从兹于包中信息的过滤规则.识别带有欺骗性源IP地址包的能力,这是山于所有的通信必须通过防火墙,绕过是极其困难的,这也就意味着防火墙是两个网络之间访问的唯一来源。此外,它还有莎于应用程序信 The stateful inspection firewall keeps the advantages of early packet filtering firewall and application gateway firewall and has better performance. The firewall has the following functions: The ability to detect each field of IP packet and follow the filtering rules of the information in the packet. The ability to have fraudulent source IP address packets, which is extremely difficult for all traffic going through the firewall and bypassing it, means that the firewall is the only source of access between the two networks. In addition, it also has Shazai application letter