What is the mechanism of the firewall session management function?
The session and direction can be uniquely determined by the flow characteristics of any direction to which the session belongs.
Session identification: Different streams have different identification methods:
l TCP flow is identified by a six-tuple: protocol + source IP + source port + destination IP + destination port + vpn instance ID (or vlan id).
l UDP flows are identified by a six-tuple: protocol + source IP + source port + destination IP + destination port + vpn instance ID (or vlan id).
l ICMP flows are identified by a six-tuple: protocol+source IP+destination IP+ICMP type+ICMP code+vpn instance ID (or vlan id).
l RAW IP flow is identified by a four-tuple: protocol+source IP+destination IP+vpn instance ID (or vlan id)