Session Objects

A session is a group of connections that are related because they are associated with a particular client. For Firewall clients, a session is created for each control channel. For SecureNAT clients, a session is created for each client IP address.

The Firewall service creates a session object for each session. The session object can be used to query about the user that made the connection and the user's permissions, for modifying the permissions of future connections, and for performing network operations on behalf of the application. The session object provides specific functionality through the IFWXSession interface, including the following:

• Retrieving the name or address of the user's computer.
• Allowing inbound connections for an existing bind.
• Creating a bind on behalf of a client.
• Impersonating the user's account.
• Querying the Firewall service about a user's access rights.
• Creating a user-specific socket for a client.