Configuring Firewall Filters and NAT

A stateful firewall filter inspects traffic flowing between a trusted network and an untrusted network. Contrasted with a stateless firewall filter that inspects packets in isolation, a stateful firewall filter provides an extra layer of security by using state information derived from past communications and other applications to make dynamic control decisions.

The Services Router uses the stateful firewall filter as a basis for performing Network Address Translation (NAT).

You must have a license to configure a stateful firewall filter and NAT. For license details, see the J-series Services Router Administration Guide.

You can use either J-Web Quick Configuration or a configuration editor to configure stateful firewall filters and NAT and to configure a stateless firewall filter.

This chapter contains the following topics. For more information about firewall filters, see the JUNOS Policy Framework Configuration Guide. For more information about NAT, see the JUNOS Services Interfaces Configuration Guide.

• Before You Begin
• Configuring a Stateful Firewall Filter with Quick Configuration
• Configuring a Stateful Firewall Filter with a Configuration Editor
• Configuring a Stateless Firewall Filter with Quick Configuration
• Configuring a Stateless Firewall Filter with a Configuration Editor
• Verifying Firewall Filter Configuration