After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a
DMZ, stateful firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken,
none of the hosts on her network can reach the Internet. Why is that?
A.
Stateful firewalls do not work with packet filtering firewalls
B.
NAT does not work with stateful firewalls
C.
IPSEC does not work with packet filtering firewalls
D.
NAT does not work with IPSEC
The NAT device in the middle breaks the authenticity, integrity and in some cases can not do anything at all with the packet. It is clear NAT and IPSec are incompatible with each other, and to resolve this NAT Traversal was developed. NAT Traversal adds a UDP header which encapsulates the IPSec ESP header.