When a packet passes through a firewall, the firewall creates a session connection for the packet to guide subsequent forwarding of the packet. However, the firewall does not create session entries for all packets. For which of the following packets does the firewall not create session entries when the packet reaches the firewall?
Comprehensive and Detailed Step-by-Step
Session Creation in Firewalls:
Firewalls create session entries for packets requiring stateful inspection (e.g., TCP, UDP, ICMP, and GRE).
Subsequent fragments of large packets do not require new sessions. Instead, they are processed based on the session created for the first fragment.
Correct Option:
C (Subsequent Fragment): Does not trigger a new session entry as it belongs to an existing session.
HCIA-Datacom Study Guide, Chapter: Firewall Session Handling
Huawei Fragmentation Processing in Firewalls
Currently there are no comments in this discussion, be the first to comment!