Contrasted with a stateless firewall, which inspects packets in isolation, a stateful firewall provides an extra layer of security by using state information derived from past communications and other applications to make dynamic control decisions for new communication attempts.
| Feature hierarchy | Feature Name |
|---|---|
| Stateful Firewalls / | FIN scan |
| Stateful Firewalls / | IP fragments |
| Stateful Firewalls / | Land attack |
| Stateful Firewalls / | Loose/Strict IP source routing |
| Stateful Firewalls / | NOn-SYN flags |
| Stateful Firewalls / | Operating system probes |
| Stateful Firewalls / | Reconnaissance using IP options |
| Stateful Firewalls / | SYN Cookie |
| Stateful Firewalls / | SYN Proxy |
| Stateful Firewalls / | SYN flood |
| Stateful Firewalls / | Screen |
| Stateful Firewalls / | Session table flood |
| Stateful Firewalls / | Stateful Firewall |
| Stateful Firewalls / | TCP SYN cookie |
| Stateful Firewalls / | WinNuke attack protection |