TCP Stateful Packet Inspection?

[thegreatoutlaw]

I've learned that stateful packet inspection is really important to use for better security. I'm using LookNStop 2.06 firewall and so far I really like how it uses no resources and works quite well. My question is, should I enable TCP Stateful packet inspection on a Home PC? Is it really needed in a small home network? If so, does this feature bog down internet speed at all?

[dmenace]

You should ask this in the Looknstop thread.

My opinion is that SPI should be on and wont effect performance. But try it yourself, its dead easy to enable / disable

[thegreatoutlaw]

I know this is a good security feature, but will it affect system/internet performance enabling this?

[Gargoyle]

I laugh so hard reading this you can't even imagine.

Well, at least, it is to compensate for me reading this topic.

[Frederic]

-{ Quote: "I know this is a good security feature, but will it affect system/internet performance enabling this?" }-
No, it should not affect the performances.

However, if you are using P2P software with a lot of simultaneous established connections you could get some TCP SPI alerts and some connections can be refused.

Frederic

[arran]

TCP Stateful Packet Inspection is a good for more security.

this option should be enabled by default, why isn't it enabled by default?

had I not seen this thread I wouldn't have found out about the option in LNS.