Auto-sync: 2026-04-19 06:32

2026-04-19 06:32:15 +08:00
parent 56f49ecd5b
commit a1636ec67a
92 changed files with 3251 additions and 5 deletions
--- a/wiki/concepts/SPI-Features.md
+++ b/wiki/concepts/SPI-Features.md
@@ -0,0 +1,17 @@
+---
+title: "SPI Features"
+type: concept
+tags:
+  - Network-Security
+  - Firewall
+---
+
+## Definition
+SPI（Stateful Packet Inspection）是一种状态包检查防火墙功能，能够追踪活跃连接的状态，基于连接状态做出过滤决策，而非仅依赖静态规则。
+
+## Application
+在 AWS Landing Zone 网络隔离场景中，Checkpoint 防火墙启用 SPI 功能，默认拒绝（default deny）策略，仅允许必需的服务和网络段进入 Landing Zone。
+
+## Related Concepts
+- [[Network-Segregation]]
+- [[Checkpoint-Firewall]]