Using State Information: TCP

• Inbound TCP packets:

  • match to existing TCP session: allow packet
  • otherwise, reject packet

• Track TCP session state, delete session from state table when finished