SANS InfoSec Handlers Diary Blog – Rediscovering Limitations of Stateful Firewalls: “NAT Slipstreaming” ? Implications, Detections and Mitigations

I recently wrote a guest diary on the SANS Internet Storm Center about a recent technique named “NAT Slipstreaming”. Other than giving a brief description about NAT Slipstreaming, I also conducted an experiment on a test network I put together to evaluate the technique. Finally, I discussed the results, possible detection and mitigation strategies.