Which is a stateful inspection firewall that can filter traffic based on specific application protocol headers and data, such as web or email?

Which is a stateful inspection firewall that can filter traffic based on specific application protocol headers and data, such as web or email?

• A. Packet filtering firewall
• B. Proxy server
• C. Stateful inspection
• D. Layer 7 firewall

Answer: (D)

Layer 7 firewall stands out because it operates at the application layer and can inspect the actual content of traffic, not just the transport or network headers. This type of firewall understands specific application protocols (like HTTP or SMTP) and can read headers and data to enforce policies—blocks, allows, or throttles based on things such as web URLs, HTTP host headers, or email commands. While stateful inspection keeps track of valid sessions, it doesn’t by itself dive into the details of application protocol messages. Packet-filtering firewalls check only IPs, ports, and basic protocols, and proxies gate traffic via an intermediary but aren’t defined by deep application-layer content inspection. So the description points to a Layer 7 firewall.

Layer 7 firewall stands out because it operates at the application layer and can inspect the actual content of traffic, not just the transport or network headers. This type of firewall understands specific application protocols (like HTTP or SMTP) and can read headers and data to enforce policies—blocks, allows, or throttles based on things such as web URLs, HTTP host headers, or email commands. While stateful inspection keeps track of valid sessions, it doesn’t by itself dive into the details of application protocol messages. Packet-filtering firewalls check only IPs, ports, and basic protocols, and proxies gate traffic via an intermediary but aren’t defined by deep application-layer content inspection. So the description points to a Layer 7 firewall.