w5ch4
159 Questions
2 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the primary function of a firewall?

  • To install software on a personal computer
  • To protect from threats from a network (correct)
  • To connect to a local network
  • To scan for viruses on a local machine

    • What type of firewall is typically used in large business organizations?

  • Hardware firewall (correct)
  • Antivirus firewall
  • Software firewall
  • UTM firewall

    • Do personal computers/laptops need a firewall?

  • No, they don't need a firewall
  • Only if connected to a local network
  • Yes, if connected to any network (correct)
  • Only if connected to the internet

    • What is a common myth about firewalls?

    <p>Firewalls are only software</p> Signup and view all the answers

    What is the difference between a firewall and antivirus?

    <p>Firewall protects from network threats, antivirus scans for viruses</p> Signup and view all the answers

    What is UTM firewall?

    <p>Unified Threat Management firewall</p> Signup and view all the answers

    Is it necessary to have a separate firewall on a personal computer/laptop?

    <p>No, it is optional</p> Signup and view all the answers

    What is the icon commonly associated with a firewall?

    <p>The adjoining icon</p> Signup and view all the answers

    What is the primary function of a router in an organization?

    <p>To direct traffic and send data to the required computer</p> Signup and view all the answers

    What is the role of a modem in an organization?

    <p>To transmit and receive digital data easily</p> Signup and view all the answers

    What is the purpose of an IP address?

    <p>To identify a specific machine on the internet</p> Signup and view all the answers

    What is the range of port numbers?

    <p>0-65535</p> Signup and view all the answers

    What are well-known ports?

    <p>Ports with numbers 0-1024, including examples like 20 for FTP data and 80 for HTTP</p> Signup and view all the answers

    What happens when a person clicks on a link or a website?

    <p>The server associated with the website sends the data to the person's computer</p> Signup and view all the answers

    What is the role of a server in an organization?

    <p>To have a static IP address</p> Signup and view all the answers

    What are the two components of addressing information in a network?

    <p>IP address and port number</p> Signup and view all the answers

    What is the primary function of a proxy service?

    <p>To act as a gateway to services</p> Signup and view all the answers

    What does a proxy service do with user requests?

    <p>Forwards them to the actual server only if they meet the firewall rules</p> Signup and view all the answers

    What is stateful inspection?

    <p>A method of monitoring information associated with a request</p> Signup and view all the answers

    What is the benefit of stateful inspection?

    <p>It reduces the overhead and increases protection</p> Signup and view all the answers

    What is an application gateway?

    <p>A security mechanism that applies to specific applications</p> Signup and view all the answers

    What does a proxy service do differently from a filter?

    <p>It provides an additional layer that forwards requests to the actual server</p> Signup and view all the answers

    Why does stateful inspection not examine the content of each packet?

    <p>Because it consumes time and header information cannot be the basis for verification always</p> Signup and view all the answers

    What is the primary difference between a proxy service and an application gateway?

    <p>A proxy service applies to all applications, while an application gateway applies to specific applications</p> Signup and view all the answers

    What is the primary reason for configuring NAT services on the firewall?

    <p>To avoid external users to access directly the internal computers and secure the firewall</p> Signup and view all the answers

    What is the implicit policy of the firewall?

    <p>All that is not expressively authorized, is prohibited</p> Signup and view all the answers

    What type of traffic will be allowed from the interior to the exterior of the company?

    <p>Only strictly necessary services</p> Signup and view all the answers

    What is the purpose of publishing web and mail services?

    <p>To provide services to external users</p> Signup and view all the answers

    What is the physical location of the firewall in the company's network?

    <p>Between the ISP router and the internal switch</p> Signup and view all the answers

    What is the benefit of allowing only strictly necessary services?

    <p>It avoids the use of unauthorized programs</p> Signup and view all the answers

    What services will be published to the exterior?

    <p>Web and mail services</p> Signup and view all the answers

    Why is it important to check for default open ports on the servers?

    <p>To prevent external access to internal services</p> Signup and view all the answers

    What is the purpose of a circuit-level gateway firewall?

    <p>To inspect packets during a connection</p> Signup and view all the answers

    Why do we need antiviruses in addition to firewalls?

    <p>To protect against viruses that may enter through email attachments</p> Signup and view all the answers

    What triggers an alarm in an Intrusion Detection System (IDS)?

    <p>Unexpected behaviors of network traffic and standard protocol behavior</p> Signup and view all the answers

    What is an example of unexpected behavior that may trigger an alarm in an IDS?

    <p>A packet with FYN flag activated with a source IP that does not have an initiated connection</p> Signup and view all the answers

    What is the characteristic of Next Generation Firewalls (NGFW)?

    <p>Filtering network and Internet traffic based upon the applications or traffic types using specific ports</p> Signup and view all the answers

    What is the purpose of a Netscreen firewall 5xp Elite?

    <p>To act as a firewall with basic IDS characteristics</p> Signup and view all the answers

    What is the primary function of an Intrusion Detection System (IDS)?

    <p>To detect and alert about intrusions</p> Signup and view all the answers

    What is the benefit of using a Next Generation Firewall (NGFW)?

    <p>It can filter network and Internet traffic based upon the applications or traffic types using specific ports</p> Signup and view all the answers

    What is the main purpose of debunking myths about firewalls?

    <p>To understand the importance of firewalls in personal computers/laptops.</p> Signup and view all the answers

    What is the primary function of a firewall?

    <p>To protect from threats from the network.</p> Signup and view all the answers

    What is true about firewalls in large business organizations?

    <p>Both hardware and software firewalls are used.</p> Signup and view all the answers

    What is the difference between a firewall and antivirus?

    <p>Firewalls protect from network threats, while antivirus scans for local viruses.</p> Signup and view all the answers

    Why are firewalls important in personal computers/laptops?

    <p>To protect from threats from the network.</p> Signup and view all the answers

    What is the relationship between firewalls and antivirus software?

    <p>Some antivirus software includes firewall functionality.</p> Signup and view all the answers

    What is the purpose of explaining the basics of firewalls?

    <p>To understand the role of firewalls in network security.</p> Signup and view all the answers

    What is the benefit of understanding firewall concepts?

    <p>To protect personal computers/laptops from network threats.</p> Signup and view all the answers

    What is the primary function of a proxy service?

    <p>To act as a gateway to services</p> Signup and view all the answers

    What does a proxy service do with user requests?

    <p>Forwards them to actual servers only if they meet the rules and regulations</p> Signup and view all the answers

    What is the main difference between stateful inspection and packet filtering?

    <p>Stateful inspection does not examine the content of each packet</p> Signup and view all the answers

    What is the purpose of an application gateway?

    <p>To apply security mechanisms to specific applications</p> Signup and view all the answers

    What does a filter do in a firewall?

    <p>Checks the package received or sent</p> Signup and view all the answers

    What is the benefit of using stateful inspection in a firewall?

    <p>It increases protection and reduces the overhead</p> Signup and view all the answers

    How does a proxy service differ from a filter?

    <p>A proxy service provides an additional layer that forwards requests to actual servers</p> Signup and view all the answers

    Why does stateful inspection not examine the content of each packet?

    <p>Because it consumes time and header information can't be the basis for verification always</p> Signup and view all the answers

    Where will the firewall be physically placed in the company's network?

    <p>Between the ISP router and the internal switch</p> Signup and view all the answers

    What is the purpose of configuring NAT services on the firewall?

    <p>To avoid external users from accessing internal computers directly</p> Signup and view all the answers

    Why is it important to check for default open ports on the servers?

    <p>To ensure that only necessary services are running on the servers</p> Signup and view all the answers

    What is the implicit policy of the firewall?

    <p>Allow only explicitly authorized traffic</p> Signup and view all the answers

    What services will be published to the exterior of the company?

    <p>Only web and mail services</p> Signup and view all the answers

    Why is it important to allow only strictly necessary services?

    <p>To avoid productivity decrease</p> Signup and view all the answers

    Which ports will be open on the web and mail server?

    <p>Ports 80, 110, 443, and 25</p> Signup and view all the answers

    What is the benefit of the firewall's implicit policy?

    <p>It increases the security of the internal network</p> Signup and view all the answers

    What is the purpose of a firewall in an organization?

    <p>To prevent users from accessing certain websites and keep anonymous users away from the organization's resources</p> Signup and view all the answers

    What type of behavior can trigger an alarm in an Intrusion Detection System (IDS)?

    <p>Unexpected behavior of standard protocol</p> Signup and view all the answers

    What is the main difference between a firewall and an antivirus?

    <p>A firewall prevents access to resources, while an antivirus scans for viruses</p> Signup and view all the answers

    What type of firewall works by filtering network traffic based on applications or traffic types?

    <p>Next Generation Firewall (NGFW)</p> Signup and view all the answers

    What is the purpose of an Intrusion Detection System (IDS)?

    <p>To send alarms due to unexpected behavior of network traffic</p> Signup and view all the answers

    Why do we need antiviruses in addition to firewalls?

    <p>Because viruses can enter as attachments from emails which might be a trusted source</p> Signup and view all the answers

    What is an example of unexpected behavior that may trigger an alarm in an IDS?

    <p>The arrival of a packet with a FYN flag activated with a source IP that does not have an initiated connection</p> Signup and view all the answers

    What is the characteristic of the Netscreen firewall 5xp Elite?

    <p>It is a basic IDS</p> Signup and view all the answers

    What is the main purpose of a firewall in a business organization?

    <p>To prevent intrusions and restrict access to unwanted websites</p> Signup and view all the answers

    What is packet filtering?

    <p>A technique of examining packet headers to control traffic</p> Signup and view all the answers

    What happens when a packet does not meet the rules defined in a firewall?

    <p>It is denied permission to enter the system</p> Signup and view all the answers

    What is the benefit of using firewalls in business organizations?

    <p>It helps to prevent intrusions and restrict unwanted access</p> Signup and view all the answers

    What is the primary function of a firewall in terms of data packets?

    <p>To examine packet headers and filter traffic</p> Signup and view all the answers

    Why do organizations define rules in firewalls?

    <p>To restrict access to unwanted websites</p> Signup and view all the answers

    What is the role of a firewall in terms of user access?

    <p>To restrict access to unwanted websites</p> Signup and view all the answers

    What happens when a packet meets the rules defined in a firewall?

    <p>It is allowed to pass through</p> Signup and view all the answers

    What is the primary purpose of a firewall in a personal computer/laptop?

    <p>To protect the computer from threats from the network</p> Signup and view all the answers

    What is the relationship between firewalls and antivirus software?

    <p>Firewalls and antivirus software are entirely different entities</p> Signup and view all the answers

    What is the myth about firewalls that needs to be busted?

    <p>Firewalls are not necessary for personal computers/laptops</p> Signup and view all the answers

    What is the characteristic of firewalls in large business organizations?

    <p>They can be both software and hardware-based</p> Signup and view all the answers

    What is the purpose of explaining the basics of firewalls?

    <p>To debunk myths about firewalls</p> Signup and view all the answers

    What is the benefit of having a firewall?

    <p>It protects the computer from threats from the network</p> Signup and view all the answers

    What is the difference between a firewall and antivirus software?

    <p>A firewall is used to protect the computer from threats from the network</p> Signup and view all the answers

    What is the primary function of a router in an organization?

    <p>To direct traffic and send data to the correct computer</p> Signup and view all the answers

    What is the purpose of a modem?

    <p>To transmit and receive digital data easily</p> Signup and view all the answers

    Why is it necessary to have a firewall in personal computers/laptops?

    <p>To protect the computer from threats from the network</p> Signup and view all the answers

    What is an IP address?

    <p>The address of a machine on the internet</p> Signup and view all the answers

    What is a port number?

    <p>A 16-bit binary number</p> Signup and view all the answers

    What is the purpose of IP address and port number?

    <p>To identify the machine and the type of service being requested</p> Signup and view all the answers

    What happens when a person clicks on a link or a website?

    <p>The computer asks the server associated with the website to send the data</p> Signup and view all the answers

    What is the role of a server in an organization?

    <p>To send data to the computer that requested it</p> Signup and view all the answers

    What is the difference between well-known ports and registered ports?

    <p>Well-known ports range from 0-1024, while registered ports range from 1025-65535</p> Signup and view all the answers

    What is the primary task of a firewall when it checks the rules defined?

    <p>To check if the data from a particular source is allowed or not permitted to enter the system</p> Signup and view all the answers

    What is the purpose of a firewall in a business organization?

    <p>To prevent intrusions by a hacker/virus/malware</p> Signup and view all the answers

    What is packet filtering in the context of firewalls?

    <p>Checking the header of packets against predefined rules</p> Signup and view all the answers

    What does a firewall do when a packet does not meet the predefined rules?

    <p>It denies the packet permission to enter the system</p> Signup and view all the answers

    What is the benefit of using firewalls in business organizations?

    <p>To restrict access to certain websites and prevent intrusions</p> Signup and view all the answers

    What is the role of a firewall in controlling traffic flowing in and out of the network?

    <p>To control traffic using one or more of three methods</p> Signup and view all the answers

    What is the purpose of defining rules in a firewall?

    <p>To define guidelines for the firewall to follow</p> Signup and view all the answers

    What happens when a packet meets the predefined rules in a firewall?

    <p>It is allowed to pass</p> Signup and view all the answers

    What is the primary function of a Next Generation Firewall (NGFW)?

    <p>To blend the features of a standard firewall with quality of service (QoS) functionalities</p> Signup and view all the answers

    What is the main goal of hiding the private network of the company from the Internet?

    <p>To prevent the company's private network from being accessed from the Internet</p> Signup and view all the answers

    What is the primary function of the 'Developer' company?

    <p>To develop computer programs for educational purposes</p> Signup and view all the answers

    What is the primary benefit of using a Unified Threat Management (UTM) firewall?

    <p>It can perform multiple security functions within one single system</p> Signup and view all the answers

    What is the primary goal of the first step in securing the company's network?

    <p>To change the public IPs to private IPs</p> Signup and view all the answers

    What is the function of a gateway antivirus in a UTM firewall?

    <p>To scan for viruses at the network gateway</p> Signup and view all the answers

    What is the primary benefit of using a UTM firewall?

    <p>It provides a single, comprehensive security solution</p> Signup and view all the answers

    Why did the 'Developer' company start to consider network security?

    <p>They realized strange activities in their servers and desktop computers</p> Signup and view all the answers

    What is the primary function of a proxy service in a firewall?

    <p>To act as a gateway to services</p> Signup and view all the answers

    What is the difference between a proxy service and a filter?

    <p>A filter checks the package received or sent, while a proxy service forwards requests to actual servers</p> Signup and view all the answers

    What is the benefit of stateful inspection in firewalls?

    <p>It increases protection and reduces overhead</p> Signup and view all the answers

    What is the primary function of an application gateway?

    <p>To apply security mechanisms to specific applications</p> Signup and view all the answers

    Why does stateful inspection not examine the content of each packet?

    <p>Because it consumes time and resources</p> Signup and view all the answers

    What is the role of a proxy service in a network?

    <p>To act as a gateway to services</p> Signup and view all the answers

    What is the primary advantage of using stateful inspection in firewalls?

    <p>It increases protection and reduces overhead</p> Signup and view all the answers

    What is the primary difference between a proxy service and a firewall?

    <p>A proxy service forwards requests, while a firewall blocks them</p> Signup and view all the answers

    What happens when a person clicks on a link or a website?

    <p>The server associated with the website sends the data to the person's computer.</p> Signup and view all the answers

    What is the primary function of a router in an organization?

    <p>To direct traffic between the local network and the internet.</p> Signup and view all the answers

    What is the purpose of an IP address?

    <p>To assign a unique identifier to a device on the network.</p> Signup and view all the answers

    What is the range of port numbers?

    <p>0-65535</p> Signup and view all the answers

    What are well-known ports?

    <p>Ports used for FTP and HTTP connections.</p> Signup and view all the answers

    What is the role of a server in an organization?

    <p>To store and manage data for the organization.</p> Signup and view all the answers

    What do routers and modems do when a person requests data from the internet?

    <p>The router directs the traffic to the local network, and the modem connects to the internet.</p> Signup and view all the answers

    What is the benefit of understanding IP addresses and port numbers?

    <p>It helps in understanding how data is retrieved from the internet.</p> Signup and view all the answers

    What is the primary function of a proxy service in a firewall?

    <p>To act as a gateway to services by forwarding user requests</p> Signup and view all the answers

    How does stateful inspection method in firewalls work?

    <p>By comparing incoming information with a database of trusted information</p> Signup and view all the answers

    What is the key difference between a proxy service and a filter?

    <p>Proxy services forward requests, while filters do not</p> Signup and view all the answers

    What type of firewall applies security mechanisms to specific applications?

    <p>Application Gateway</p> Signup and view all the answers

    Why does stateful inspection not examine the content of each packet?

    <p>Because it consumes time and may not always be accurate</p> Signup and view all the answers

    What is the primary benefit of using stateful inspection in firewalls?

    <p>Increased protection and reduced overhead</p> Signup and view all the answers

    How do proxy services handle user requests?

    <p>By forwarding them to actual servers if they meet firewall rules</p> Signup and view all the answers

    What is the primary advantage of using an Application Gateway?

    <p>It provides an additional layer of security for specific applications</p> Signup and view all the answers

    What is the purpose of a firewall in an organization?

    <p>To prevent anonymous users from accessing the organization's resources.</p> Signup and view all the answers

    What is a characteristic of a Circuit-Level Gateway firewall?

    <p>It applies security mechanisms when a connection is established.</p> Signup and view all the answers

    What is an example of unexpected behavior that may trigger an alarm in an IDS?

    <p>A packet with a FYN flag activated with a source IP that does not have an initiated connection.</p> Signup and view all the answers

    What is the primary function of a Next Generation Firewall (NGFW)?

    <p>To filter network traffic based on applications or traffic types.</p> Signup and view all the answers

    Why is it necessary to have antivirus software in addition to a firewall?

    <p>Because a firewall cannot detect viruses in email attachments.</p> Signup and view all the answers

    What is the primary function of an Intrusion Detection System (IDS)?

    <p>To detect unexpected behaviors of network traffic and standard protocol behavior.</p> Signup and view all the answers

    What is a benefit of using a Next Generation Firewall (NGFW)?

    <p>It can filter network traffic based on applications or traffic types.</p> Signup and view all the answers

    What is a common misconception about firewalls?

    <p>Firewalls can prevent all types of cyber attacks.</p> Signup and view all the answers

    What is the purpose of configuring NAT services on the firewall?

    <p>To avoid external users accessing internal computers directly</p> Signup and view all the answers

    What type of traffic will be allowed from the interior to the exterior of the company?

    <p>Only strictly necessary services</p> Signup and view all the answers

    What is the purpose of publishing web and mail services?

    <p>To allow external users to access web and mail services</p> Signup and view all the answers

    What is the physical location of the firewall in the company's network?

    <p>Between the ISP router and the internal switch</p> Signup and view all the answers

    What is the benefit of allowing only strictly necessary services?

    <p>To avoid the use of programs that expose the internal network</p> Signup and view all the answers

    What services will be published to the exterior?

    <p>Web and mail services</p> Signup and view all the answers

    Why is it important to check for default open ports on the servers?

    <p>To avoid the use of programs that expose the internal network</p> Signup and view all the answers

    What is the implicit policy of the firewall?

    <p>All that is not expressively authorized is prohibited</p> Signup and view all the answers

    What is a common misconception about firewalls?

    <p>Firewalls are only needed in organizations</p> Signup and view all the answers

    What is the primary purpose of a firewall in a network?

    <p>To protect against threats from the network</p> Signup and view all the answers

    What is true about firewalls in small scale organizations or personal computers/laptops?

    <p>They can be either hardware or software</p> Signup and view all the answers

    What is the benefit of explaining the basics of firewalls?

    <p>To debunk myths about firewalls</p> Signup and view all the answers

    What is the purpose of a firewall in a personal computer/laptop?

    <p>To protect against threats from the network</p> Signup and view all the answers

    What is the difference between a firewall and antivirus software?

    <p>Firewalls are used for network protection, while antivirus software is used for local machine protection</p> Signup and view all the answers

    What is the importance of understanding firewall concepts?

    <p>To understand the basics of firewalls and debunk myths</p> Signup and view all the answers

    Study Notes

    Firewall Concept and Configuration

    • Firewall is a essential security system that can be hardware or software, and is needed in personal computers/laptops and organizations to protect from network threats.
    • Firewalls are different from anti-viruses, which work against local machine viruses, whereas firewalls protect from network threats.
    • Firewalls can be integrated into anti-virus software, making it optional to have a separate firewall on personal computers/laptops.

    Basics of Firewall

    • A firewall works between a network and a computer, controlling the flow of data between them.
    • IP address and port number are used to identify machines on the internet, with IP address being the machine's address and port number being a 16-bit binary number (0-65535) that acts as a door.
    • Well-known ports (0-1024) are used for specific services such as FTP data (20) and HTTP (80).
    • Registered ports are used for other services.

    How Firewall Works

    • Proxy service acts as an intermediate stage between the network and computer, forwards user requests to actual servers, and checks if the request meets firewall rules.
    • Stateful inspection method increases protection and reduces overhead by monitoring packet information and comparing it with trusted information.
    • Application Gateway applies security mechanisms to specific applications, such as FTP and Telnet servers.
    • Circuit-level Gateway applies security mechanisms when a TCP or UDP connection is established.

    IDS (Intrusion Detection System)

    • IDS sends alarms due to unexpected network traffic behavior and standard protocol behavior.
    • IDS detects attacks by analyzing traffic and comparing it with stored attack types in a database.

    Next Generation Firewall (NGFW)

    • NGFW filters network and internet traffic based on applications or traffic types using specific ports.
    • NGFW allows access to specific services, such as web and mail servers, while blocking other services.

    Firewall Installation

    • A firewall is installed physically between the ISP router and the internal switch of the company.
    • NAT services are configured to avoid external users accessing internal computers directly.
    • Implicit policy is established, allowing only necessary services to enter the internal network.
    • Policies are set to publish web and mail services, and to allow only necessary traffic from the interior to the exterior.

    Firewall Concept and Configuration

    • Firewall is a necessary security system for computer networks and personal computers/laptops.
    • It can be hardware or software, and is essential for protecting against threats from networks.

    What is Firewall?

    • Firewall is not just software; it can be a combination of hardware and software.
    • In large business organizations, hardware and software firewalls are used, while in small-scale organizations or personal computers/laptops, software firewalls are sufficient.
    • Firewall is different from antivirus, which works against viruses on the local machine.

    How Firewall Works

    • Firewall works by checking the rules defined and seeing if the data from a particular source is allowed or not permitted to enter the system.
    • If not permitted, the firewall blocks the data and locks the door to that link.

    Methods of Firewall

    • Packet Filtering: Firewalls use packet filtering to control traffic flowing in and out of the network.
    • Proxy Service: Firewalls act as an intermediate stage between the network and computer, disallowing direct connections between the internet/network and a computer.
    • Stateful Inspection: This method increases protection and reduces overhead, monitoring information associated with requests to allow or disallow incoming information.
    • Application Gateway: This method applies security mechanisms to specific applications, such as FTP and Telnet servers.
    • Circuit-level Gateway: This method applies security mechanisms when a TCP or UDP connection is established.

    Intrusion Detection System (IDS)

    • IDS is an Intrusion Detection System that sends alarms due to unexpected behaviors of network traffic and standard protocol behavior.
    • IDS analyzes traffic and compares it with different attack types stored in a database.

    Next Generation Firewall (NGFW)

    • NGFW filters network and internet traffic based on applications or traffic types using specific ports.
    • NGFW can be used to publish web and mail servers, and to check if other ports are opened by default installation.

    Firewall Installation

    • Firewall installation involves placing the firewall physically between the ISP router and the internal switch of the company.
    • NAT services are configured to avoid external users accessing internal computers directly.
    • Implicit policy is established, prohibiting all traffic that is not explicitly authorized.
    • Policies are defined to publish web services and mail services, and to allow traffic from the interior to the exterior of the company only for strictly necessary services.

    Firewall Concept and Configuration

    • Firewall is a crucial component of network security that can be either hardware or software
    • Myths about firewalls:
      • It is not just software, but can be a combination of both hardware and software
      • Personal computers/laptops need firewalls if they are connected to a network
      • Firewall is not the same as antivirus; firewall protects from network threats while antivirus protects against local machine threats

    Basics of Network and Firewall

    • A network consists of routers, modems, and IP addresses to facilitate communication between devices
    • IP address is a unique identifier for a machine on the internet, and port numbers are part of the addressing information
    • Port numbers are divided into well-known ports (0-1024) and registered ports
    • Firewall's job is to check the rules defined and see if the data from a particular IP address and port number is allowed or not permitted to enter the system

    How Firewall Works

    • Firewalls use one or more of three methods to control traffic flowing in and out of the network:
      • Packet Filtering: checks packets against defined rules and allows or denies permission based on the rules
      • Proxy Service: acts as an intermediate stage between the network and computer, forwarding requests to actual servers only if they meet the defined rules
      • Stateful Inspection: monitors information associated with a request and compares it to trusted information to allow or deny permission
    • Next-Generation Firewalls (NGFWs) provide smarter and deeper inspection by blending firewall features with quality of service (QoS) functionalities

    Unified Threat Management (UTM) Firewall

    • UTM is an all-inclusive security product that performs multiple security functions within one single system
    • Features of UTM Firewall:
      • Network firewalling
      • Network intrusion detection/prevention (IDS/IPS)
      • Gateway antivirus (AV)
      • Gateway anti-spam
      • VPN
      • Content filtering
      • Load balancing
      • Data loss prevention
      • Hot Spot Management
      • Logging and reporting

    Securing a Company Network

    • A company with public IPs for servers and desktop computers needs to secure its network by planning a proposal to start securing the network
    • The first step is to change the IPs to private type to hide the private network from the internet

    Firewall Concept and Configuration

    • Firewall is a essential security system that can be hardware or software, and is needed in personal computers/laptops and organizations to protect from network threats.
    • Firewalls are different from anti-viruses, which work against local machine viruses, whereas firewalls protect from network threats.
    • Firewalls can be integrated into anti-virus software, making it optional to have a separate firewall on personal computers/laptops.

    Basics of Firewall

    • A firewall works between a network and a computer, controlling the flow of data between them.
    • IP address and port number are used to identify machines on the internet, with IP address being the machine's address and port number being a 16-bit binary number (0-65535) that acts as a door.
    • Well-known ports (0-1024) are used for specific services such as FTP data (20) and HTTP (80).
    • Registered ports are used for other services.

    How Firewall Works

    • Proxy service acts as an intermediate stage between the network and computer, forwards user requests to actual servers, and checks if the request meets firewall rules.
    • Stateful inspection method increases protection and reduces overhead by monitoring packet information and comparing it with trusted information.
    • Application Gateway applies security mechanisms to specific applications, such as FTP and Telnet servers.
    • Circuit-level Gateway applies security mechanisms when a TCP or UDP connection is established.

    IDS (Intrusion Detection System)

    • IDS sends alarms due to unexpected network traffic behavior and standard protocol behavior.
    • IDS detects attacks by analyzing traffic and comparing it with stored attack types in a database.

    Next Generation Firewall (NGFW)

    • NGFW filters network and internet traffic based on applications or traffic types using specific ports.
    • NGFW allows access to specific services, such as web and mail servers, while blocking other services.

    Firewall Installation

    • A firewall is installed physically between the ISP router and the internal switch of the company.
    • NAT services are configured to avoid external users accessing internal computers directly.
    • Implicit policy is established, allowing only necessary services to enter the internal network.
    • Policies are set to publish web and mail services, and to allow only necessary traffic from the interior to the exterior.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Related Documents

    ch4.pdf

    Description

    Learn about the basics of firewalls, how they work, and their configuration. Understand the concept of UTM firewalls and their role in network security.

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser