06Stateless versus stateful firewalls, NAT, and egress filtering: what does each actually protect?▼easyNewCiscoPalo Alto NetworksCheck Point○ sign inNAT is not a firewall, and inbound rules are only half a policy. Interviewers check whether you know what each device decides, and why the outbound direction is where breaches are contained.Open full answer →
19How does NAT actually work, how do peers get through it, and why is 'we are behind NAT' not a security control?▼mediumNewGoogleMicrosoftCisco◆ premiumNAT drops unsolicited inbound packets as a side effect of bookkeeping, not policy. Port forwards, UPnP, outbound connections and IPv6 all walk around it.Open full answer →