Which of the following firewalls depends on the three-way handshake of the TCP protocol?

A proxy-based firewall operates at the application layer, acting as an intermediary that terminates and re-initiates connections; it does not rely specifically on monitoring the TCP three-way handshake as its core mechanism.

A stateful firewall maintains a state table that records the status of network connections, including tracking the TCP three-way handshake (SYN, SYN-ACK, ACK). It uses this state information to determine whether an incoming packet belongs to an already-established, legitimate session. This distinguishes it from stateless packet filters, which evaluate each packet in isolation without connection context.

A packet filter firewall is stateless - it inspects each packet individually based on rules like source/destination IP and port, without tracking whether a TCP handshake has occurred.

Endian Firewall is a specific Linux-based firewall distribution/product, not a distinct firewall type defined by its inspection mechanism.