摘要 |
<p>A network security device for controlling the flow of packets to and from an internal network with two network cards and a stateful inspection firewall. The first network card forwards each packet for inspection and if it is part of an existing session it is forwarded to the second network card and onto the network. If not the packet is compared to a set of rules to determine its acceptability. If acceptable it is forwarded to the second network card and onto the network and it not it is dropped.</p> |