SPI Firewall incompatibilites

Welshchris · 27-02-2010, 23:40

I can remember reading a few threads on here about people who are having corrupt downloads and using SPI on their firewalls, i was one using a Netgear WGR614V9 with Vista....

I just found this on wikipedia that maybe interesting...

"Microsoft's latest operating systems, Windows 7 and Windows Vista, use TCP window scaling for non-http (web) connections. So do Linux kernels from versions 2.6.8 on. This behavior is incompatible with some firewalls that use SPI (Stateful Packet Inspection) as found in routers like the Checkpoint NG R55, Cisco PIX earlier than v6.3.1, NetApp Cache Appliances, SonicWall, D-Link DI-724U, Netgear WGR614, and Linksys WRT54GS.[1] This may be related to previous failures to work properly. Pre-released (beta) versions of Vista allegedly had more problems, including failed http (web) connections through SPI firewalls."

Trident · 15-03-2010, 22:14

I know that Microsoft's ISA 2006 upwards, the new ZyXEL USG's and CheckPoint Safe@Office firewalls dont suffer from this problem.