Stonesoft Multi-Layer Inspection
Like stateful inspection firewalls, the Stonesoft Firewall uses state tables to track connections and determine whether a packet is a part of an established connection. The Stonesoft Firewall can also act as a packet filter for types of connections that do not require the security considerations of stateful inspection. By default, connection tracking is on. However, it is not necessary to keep track of the state of certain kinds of connections (for example, SNMP traps). Some applications may also communicate in a nonstandard way that prevents them from passing the firewall when connection tracking is used. For those connections, you can disable connection tracking in the Access rules, as the security level can be chosen separately for each rule.