I understand that Firewalls may operate on different OSI layers depends on the firewall itself. but how can I know if I install specific firewall at what OSI Layer(s) it does operate ?
4
-
iptables works at layers 2-4 of the OSI model– user25583May 23, 2016 at 7:09
-
Related Q&A (but not duplicate).– EddieMay 23, 2016 at 15:20
-
iptables has some application layer knowlage to facilitate connection tracking and NAT.– Peter GreenApr 5, 2017 at 13:34
-
Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.– Ron Maupin ♦Jan 5, 2021 at 2:30
Add a comment
|
3 Answers
Since firewalls essentially filter data, the answer depends on what kind of filtering you do.
If you filter based on IP address (for example), you can say that your firewall is filtering at layer 3. If you filter specific ports, you can say you're filtering at layer 4. If your firewall inspects specific protocol states or data, you can say it operates at layer 7.
The truth is that most firewalls do all these things in combination. So practically speaking there really is no useful answer to your question.
May I suggest you also read this question about the OSI model.
answered Mar 8, 2015 at 21:39
Unless your firewall uses the OSI model, it is of little value to speak about it in these terms. You should bear in mind that the TCP/IP model only has five layers.
That being said, it largely depends on if your firewall is capable of doing Deep Packet Inspection. If it is, it operates at L3/L4 and at the Application Layer. Otherwise, it only filters at the IP and Transport layers.
On the other hand, it "Operates" at all layers except for the application layer. It must have a physical connection, provide a data link/Network connection and enforce NAT policies and firewall rules at the IP layer and Transport layer. If it didn't it would not be a functioning firewall.
It depends on what kind of firewall. There are three basic types: Generation 1 Packet Filter runs at layer 3, Generation 2 Stateful Filter runs at layer 5, and Generation 3 Application Firewall (also known as NGFW: Next Generation Fire-Wall.)