HP-UX Security Features - OpenMPE

HP-UX IPFilter: Features
• Protection is based on inspection (stateless and
stateful) of network traffic going to/from the
system. Handles TCP, UDP, and ICMP packet
flows.
• Uses a subset of features/technology used by
perimeter firewalls:
- Rules for allowing traffic in/out. Based on IP address, port #,
protocol, interface, ICMP message type, etc.
- Full-fledged stateful inspection firewall
- Connection monitoring/Detection of potential attacks
- Verify correct TCP behavior -> sequence numbers, flags,
detects connection closing, etc.
- Rule grouping for efficiency/clarity
- Flexible command-line configuration and logging capabilities
Network Security – Products and Features
August 26, 2004 68