Mastering™ Network Security, Second Edition

5.6. Which Firewall Functions Should I Use?

There are no clear-cut absolutes for choosing a particular type of firewall solution, although advances in creating hybrid function routers mean that a reasonable investment can provide you with the full range of features without purchasing a firewall product separate from a router. Usually the distinguishing factor is the sophistication of the stateful inspection level performed by the router (or firewall), along with management, and VPN functions. Additionally, you should consider cost, business need, and security requirements when you are looking for a proper solution.

Since static filtering is considered weak, it is the lowest level of perimeter security. It is also the most basic, however, because ...