An enterprise wants to implement a firewall capable of inspecting the payload of network traffic, enabling it to detect and prevent malicious content within protocols like HTTP and FTP. Which type of firewall would BEST meet this requirement?
An application-level gateway operates at the highest layer of the OSI model and can inspect the contents of network traffic to make filtering decisions based on the actual data being transmitted. This allows it to detect and block specific commands or payloads within protocols like Hypertext Transfer Protocol (HTTP) and File Transfer Protocol (FTP), which is necessary to prevent threats such as malware or exploits that are hidden within legitimate traffic. Other firewall types, such as packet-filtering firewalls and circuit-level gateways, do not inspect the data payload and cannot make decisions based on the content of the communication.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an application-level gateway and how does it work?
Open an interactive chat with Bash
How do application-level gateways differ from packet-filtering firewalls?
Open an interactive chat with Bash
What types of threats are prevented by using an application-level gateway?