Which device makes connections on behalf of endpoints (circuit-level at Layer 5, application-level at Layer 7)?

Which device makes connections on behalf of endpoints (circuit-level at Layer 5, application-level at Layer 7)?

• A. Firewall
• B. Proxy Firewall
• C. NGFW
• D. Load Balancer

Answer: (B)

A proxy firewall acts as an intermediary for client connections. It terminates the client’s session and then opens a separate connection to the destination server, relaying traffic between the two. Because the proxy owns the client-side connection, it can inspect and enforce policies at multiple layers: at circuit level (Layer 5) by managing the session, and at application level (Layer 7) by understanding and filtering based on the application protocol. This setup means the proxy effectively makes connections on behalf of the endpoints, which is why it best fits the scenario described. A standard firewall primarily filters traffic based on IPs and ports and may track state, but it doesn’t typically terminate and reinitiate sessions on behalf of clients. A load balancer distributes traffic and may terminate connections for scalability, but its main role isn’t to proxy application-level sessions for policy enforcement in the way a proxy firewall does. A next-generation firewall adds deep inspection and more features, but proxying client connections is the distinctive trait of a proxy-based solution.

A proxy firewall acts as an intermediary for client connections. It terminates the client’s session and then opens a separate connection to the destination server, relaying traffic between the two. Because the proxy owns the client-side connection, it can inspect and enforce policies at multiple layers: at circuit level (Layer 5) by managing the session, and at application level (Layer 7) by understanding and filtering based on the application protocol. This setup means the proxy effectively makes connections on behalf of the endpoints, which is why it best fits the scenario described.

A standard firewall primarily filters traffic based on IPs and ports and may track state, but it doesn’t typically terminate and reinitiate sessions on behalf of clients. A load balancer distributes traffic and may terminate connections for scalability, but its main role isn’t to proxy application-level sessions for policy enforcement in the way a proxy firewall does. A next-generation firewall adds deep inspection and more features, but proxying client connections is the distinctive trait of a proxy-based solution.