VMware NSX

  • 1.  Difference between Stateful and Stateless firewall

    Posted Jun 04, 2024 01:20 AM

    Hello Team,

    Would like to know the difference between stateful and stateless firewall? How exactly it works? What are the use cases of the same?

    thank you.



  • 2.  RE: Difference between Stateful and Stateless firewall

    Posted Jun 27, 2024 02:42 PM

    By default, firewall rule sections (and their rules) are configured as stateful. In a stateful firewall, a cache is created and maintained for traffic flows that match a firewall rule in which the action is ALLOW. After the first packet of a new flow has been validated against the firewall ruleset, subsequent network packets belonging to that flow no longer need to be checked. This will result in lower flow latency and better overall firewall performance under heavier traffic loads. Stateful firewalls are also better at identifying unauthorized or forged network traffic.