Stateful Inspection Firewall Technology Research

With the development of the Internet, network security has become a crucial impact on the healthy development of network problems. Which is effectively blocking firewall technology supply network, build a network security area of key equipment. Traditional packet filtering firewall handles user camouflage recognition showed severe deficiencies.In order to effectively put a firewall protective effect, we propose a stateful inspection firewall technology based. And build on this state detection technology based firewall for a detailed analysis and design. Stateful inspection firewall on the overall structure of the basis for the design, a detailed discussion of the state of different network protocols method detection mechanism. And on the use of state detection subsystem to implement NAT methods for analysis and design. Finally, stateful inspection firewall technology-based analysis and design basis, the paper paper constructs stateful inspection firewall functionality and performance testing. Discussed in detail in dealing with stateful inspection firewall TCP, UDP, ICMP protocol’s performance.Through this study constructed a detailed state detection technology based firewall system, real reached a precise control of network traffic and filtering. Effectively avoid the traditional packet filtering firewall and proxy firewall technology drawbacks and shortcomings. Hope that through this research for other scholars to further explore stateful firewall technology, and strengthen network security play a reference and reference value.