17 lines
553 B
Markdown
17 lines
553 B
Markdown
---
|
||
title: "SPI Features"
|
||
type: concept
|
||
tags:
|
||
- Network-Security
|
||
- Firewall
|
||
---
|
||
|
||
## Definition
|
||
SPI（Stateful Packet Inspection）是一种状态包检查防火墙功能，能够追踪活跃连接的状态，基于连接状态做出过滤决策，而非仅依赖静态规则。
|
||
|
||
## Application
|
||
在 AWS Landing Zone 网络隔离场景中，Checkpoint 防火墙启用 SPI 功能，默认拒绝（default deny）策略，仅允许必需的服务和网络段进入 Landing Zone。
|
||
|
||
## Related Concepts
|
||
- [[Network-Segregation]]
|
||
- [[Checkpoint-Firewall]] |