Exam 312-49v10 topic 1 question 142 discussion

“When you visit a website, stateful firewalls can tell if incoming packets are being sent in response to something outgoing from your computer. For instance, if your computer opens a connection with Google’s web servers and then sends packets to that connection, the firewall will see this as part of an established session.”

A circuit-level proxy firewall is a type of firewall that only allows incoming connections that were first initiated by internal computers. It operates at the session layer of the OSI model and creates a virtual circuit between the internal and external networks. This type of firewall does not examine the contents of the packets, but only checks the state of the connection to ensure that it is valid. Therefore, it is an ideal choice for enforcing the DoD's policy of only allowing incoming connections that were first initiated by internal computers.