PACKET FILTERING ?

 PACKET FILTERING ?

1. A malicious user can still discover what is packets meet the pix firewall criteria and send arbitary traffic.
2. Packet can get through by being fragmented.
3. complex access control lists are difficult to configure and cumbersome to maintain.
4. Not all services can be packet filtered.