| Chapter 7. Session Handling | ||
|---|---|---|
 |  | |
| Chapter 7. Session Handling | ||
|---|---|---|
| | | |
Table of Contents
This chapter describes sessions, session-tracking, and how the rules for session creation can be used to implement Firewalling, subject specific traffic flows to traffic-shaping, and perform address mapping techniques including conventional Network Address Translation (NAT).
Session-tracking is also involved in the route override functionality of the FB6000 - this is covered in Section 8.6.
A network router is a device whose role is to forward packets entering the device out onto an appropriate physical interface, based primarily, or solely, on the destination IP address of the packets. Typically the source address of each packet is not considered in the forwarding decision.
A firewall on the other hand is a device whose primary role is to filter traffic based on specified criteria. Since most network communication between two end-points is bi-directional, any such filtering must correctly handle the packets flowing in both directions that constitute a specific end-to-end 'flow' (for connection-less protocols, such as UDP) or 'connection' (for connection-orientated protocols, such as TCP).
In practice, a firewall appliance will have to make routing decisions too.
| | | |
| 6.3. Physical port settings |  | 7.2. Session Tracking |