Advantages and disadvantages of traditional packet filters Advantages a One screening router can protect entire network a Can be efficient if filtering rules are kept simple a Widely available. Almost any router, even Linux boxes Disadvantages a Can possibly be penetrated a Cannot enforce some policies. For example, permit certain users a Rules can get complicated and difficult to testAdvantages and disadvantages of traditional packet filters ◼ Advantages ❑ One screening router can protect entire network ❑ Can be efficient if filtering rules are kept simple ❑ Widely available. Almost any router, even Linux boxes ◼ Disadvantages ❑ Can possibly be penetrated ❑ Cannot enforce some policies. For example, permit certain users. ❑ Rules can get complicated and difficult to test 11