Which filtering mechanism is used as the primary filtering mechanism by almost all main border firewalls?

• A. None of the above
• B. Static packet filtering
• C. Unified threat management
• D. Application proxy

Answer: (A)

Border firewalls typically rely on stateful packet inspection, which tracks the state of connections and applies rules based on context, not just individual packets. This approach lets the firewall understand whether a packet belongs to an established connection, part of a valid handshake, or should be blocked based on the connection’s state and history. Static packet filtering, by contrast, evaluates packets in isolation and lacks the connection-context needed for modern security demands, making it an older, less capable method for border security. Application proxy firewalls operate by mediating traffic at the application layer, which introduces a proxy in the path and is not the standard primary filtering mechanism across most border devices. Unified threat management describes a bundle of security features in a single appliance rather than a distinct filtering approach, so it isn’t the primary filtering mechanism either. Since the commonly used primary method—stateful inspection—is not listed, the correct answer is none of the above.