Stateful Firewall Policy Queries

Firewalls are devices or programs that control the flow of network traffic between the outside internet and the private network. The model of stateful firewalls consists of two sections: a stateful section and a stateless section. The stateful section checks whether the firewall accepts a packet previously that may affect the fate of the current packet. We issue queries to analyze the function of their firewalls. In this paper, we introduce how to describe a stateful firewall query and how to process a stateful firewall query. We present methods for optimizing stateful firewall decision diagrams to efficiently perform SFDD-based firewall Query Processing Algorithm. Our experimental results show that our SFDD-based firewall Query Processing Algorithm is more efficient than the traditional Rule-Based stateful Firewall Query Processing.