Keeping State

• Statefull/Dynamic firewalls have more information to use in decision making

  • Keeping state is more complicated

• Proxy Firewalls often keep state

  • But packet filtering firewalls can be statefull too