I understand that Firewalls may operate on different OSI layers depends on the firewall itself.but how can I know if I install specific firewall at what OSI Layer(s) it does operate ?


Since firewalls essentially filter data, the answer depends on what kind of filtering you do.

You are watching: What layer of the osi model do firewalls operate

If you filter based on IP address (for example), you can say that your firewall is filtering at layer 3. If you filter specific ports, you can say you"re filtering at layer 4. If your firewall inspects specific protocol states or data, you can say it operates at layer 7.

The truth is that most firewalls do all these things in combination. So practically speaking there really is no useful answer to your question.

May I suggest you also read this question about the OSI model.



Unless your firewall uses the OSI model, it is of little value to speak about it in these terms. You should bear in mind that the TCP/IP model only has five layers.

That being said, it largely depends on if your firewall is capable of doing Deep Packet Inspection. If it is, it operates at L3/L4 and at the Application Layer. Otherwise, it only filters at the IP and Transport layers.

On the other hand, it "Operates" at all layers except for the application layer. It must have a physical connection, provide a data link/Network connection and enforce NAT policies and firewall rules at the IP layer and Transport layer. If it didn"t it would not be a functioning firewall.


It depends on what kind of firewall. There are three basic types: Generation 1 Packet Filter runs at layer 3, Generation 2 Stateful Filter runs at layer 5, and Generation 3 Application Firewall (also known as NGFW: Next Generation Fire-Wall.)


Thanks for contributing an answer to Network Engineering Stack Exchange!

Please be sure to answer the question. Provide details and share your research!

But avoid

Asking for help, clarification, or responding to other answers.Making statements based on opinion; back them up with references or personal experience.

See more: How To Say My Heart In Italian ? How To Say You Are My Heart In Italian

To learn more, see our tips on writing great answers.

Post Your Answer Discard

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged firewall osi or ask your own question.

site design / logo © 2021 Stack Exchange Inc; user contributions licensed under cc by-sa. rev2021.10.1.40358

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.