TCP Stateful Packet Inspection?

Discussion in 'LnS English Forum' started by thegreatoutlaw, Dec 7, 2007.

Thread Status:
Not open for further replies.
  1. thegreatoutlaw

    thegreatoutlaw Registered Member

    Joined:
    Nov 23, 2007
    Posts:
    75
    I've learned that stateful packet inspection is really important to use for better security. I'm using LookNStop 2.06 firewall and so far I really like how it uses no resources and works quite well. My question is, should I enable TCP Stateful packet inspection on a Home PC? Is it really needed in a small home network? If so, does this feature bog down internet speed at all?
     
  2. dmenace

    dmenace Registered Member

    Joined:
    Nov 29, 2006
    Posts:
    275
    You should ask this in the Looknstop thread.

    My opinion is that SPI should be on and wont effect performance. But try it yourself, its dead easy to enable / disable
     
  3. thegreatoutlaw

    thegreatoutlaw Registered Member

    Joined:
    Nov 23, 2007
    Posts:
    75
    I know this is a good security feature, but will it affect system/internet performance enabling this?
     
  4. Gargoyle

    Gargoyle Registered Member

    Joined:
    Jun 2, 2007
    Posts:
    67
    I laugh so hard reading this you can't even imagine.

    Well, at least, it is to compensate for me reading this topic.
     
  5. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    No, it should not affect the performances.

    However, if you are using P2P software with a lot of simultaneous established connections you could get some TCP SPI alerts and some connections can be refused.

    Frederic
     
  6. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,139
    TCP Stateful Packet Inspection is a good for more security.

    this option should be enabled by default, why isn't it enabled by default?

    had I not seen this thread I wouldn't have found out about the option in LNS.
     
Thread Status:
Not open for further replies.