Are stateful firewalls problematic when dynamic routing is used? I'm
guessing that when the network topology changes while an existing
connection exists in the state table, this would cause problems as the
source IP has the potential of changing and thus causing the existing
connection to drop. I am not sure what the solution to this would be.
The only one I can think of is to ensure that the firewall policy
contains all possible source IP addresses for each possible network
topology change? Am I correct at all, or way off? Any tips would be
appreciated! Thx.
|
Similar Threads
Linear Mode
