PDA

View Full Version : Stateful Packet Inspection--Any Disadvantages?


profhsg
June 14th, 2004, 03:35 PM
I noticed that in Frederic's reply to an earlier question, Frederic suggested that where P2P was not being used, enabling stateful packet inspection for connections using the TCP protocol would increase the level of security.

http://www.wilderssecurity.com/showthread.php?t=36021

Are there any disadvantages to using SPI for the TCP protocol other than with P2P connections?

Thanks in advance.

Thomas M
June 15th, 2004, 02:37 AM
No, you should always enable SPI. I even tested one P2P-software with SPI enabled. On my system it worked (at least for the 12 hours of testing)

Thomas :)