Packet filtering firewalls operate inline at junction points where devices such as routers and switches do their work. However, these firewalls don't route packets; rather they compare each packet received to a set of established criteria, such as the allowed IP addresses, packet type, port number and other aspects of the packet protocol headers.
Disadvantage:
-Doesn't check the payload and can be easily spoofed.
Circuit-level gateway:
Using another relatively quick way to identify malicious content, circuit-level gateways monitor TCP handshakes and other network protocol session initiation messages across the network as they are established between the local and remote hosts to determine whether the session being initiated is legitimate -- whether the remote system is considered trusted. They don't inspect the packets themselves
Disadvantage
If they aren't used in conjunction with other security technology, circuit-level gateways offer no protection against data leakage from devices within the firewall
Comments:
I'd say a Circuit-level gateway is more secure to use as the organization should have put in place other security mechanisms
A firewall is a device used for network security. It monitors network traffic (both incoming and outgoing) and then, based on a set of security rules, either permits or blocks data packets.
Packet filtering firewall:
Packet filtering firewalls operate inline at junction points where devices such as routers and switches do their work. However, these firewalls don't route packets; rather they compare each packet received to a set of established criteria, such as the allowed IP addresses, packet type, port number and other aspects of the packet protocol headers.
Disadvantage:
-Doesn't check the payload and can be easily spoofed.
Circuit-level gateway:
Using another relatively quick way to identify malicious content, circuit-level gateways monitor TCP handshakes and other network protocol session initiation messages across the network as they are established between the local and remote hosts to determine whether the session being initiated is legitimate -- whether the remote system is considered trusted. They don't inspect the packets themselves
Disadvantage
If they aren't used in conjunction with other security technology, circuit-level gateways offer no protection against data leakage from devices within the firewall
Comments:
I'd say a Circuit-level gateway is more secure to use as the organization should have put in place other security mechanisms
Reference:
https://www.techtarget.com/searchsecurity/feature/The-five-different-types-of-firewalls