Disadvantages of Relying on NAT for Security
Although NAT provides some level of protection to the networks sitting behind it, it is important to understand that it is by no means a comprehensive security solution.
The following sections outline some of the most obvious reasons why NAT should not be considered a security mechanism, despite the illusion of security it provides.
No Tracking of Protocol Information Other Than the Port Number Information
The NAT table, created on the NAT device that is used to track the outgoing and incoming connections, does not track any of the other information contained in the packets. Information such as the packet sequence numbers, the TCP handshake, and UDP progress-based timers are some of the pieces of information ...
Get Network Security Principles and Practices now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
