Statefull Firewall

[henockk]

Dear all

I am new to Firewall Technologies and I want to ask Regardless of statefull Firewall feature. A statefull firewall maintains the tcp state and knows a user session so why do we need to allow a user to allow in both direction incoming and outgoing for same traffic if the state is already known when the user requests the session is known and the firewall knows for the returning also 

[Yurisk · Accepted solution]

That is the point of stateful inspection - you don't need to allow user/whoever the returning traffic. The stateful firewall takes care of matching returning packets to the existing outgoing connection.