Firewall Practical Applications

Flashcards based on Chapter 4 of Network Defense and Countermeasures

Single Machine Firewalls (SMFs)

Used on PCs in a home office or individual workstations on a network; helpful as a supporting role for network security, not a primary solution.

Common characteristics of single machine firewalls

Packet filtering or screening firewalls; software-based; easy to configure and set up.

Key characteristics of Single Machine Firewalls (SMFs)

Ease of use, low cost or even free download, meant for essential security, not high security.

Windows 10 Firewall

Blocks inbound and outbound packets, configurable through the Windows Firewall with Advanced Security app.

Windows 10 User Account Control

Prompts the user for an admin user’s credentials if the task requires administrative permissions; not a firewall, but strongly related to security

Three kinds of objects for Linux Firewall - Iptables

Tables, Chains, and Rules

Three tables and their standard chains for Linux Firewall - Iptables

Packet filtering, Network address translation, Packet alteration

Symantec Norton Firewall

Basic packet filtering, ability to block outbound traffic, supports ad/pop-up blocking, can scan your machine through Symantec web site

McAfee Personal Firewall

Blocks outbound/inbound traffic, shows on a map the path from which an attack is coming, connected to Hackerwatch.org, advanced features, such as basic intrusion detection

SonicWALL TZ series

Stateful packet inspection, built-in encryption, easy management and configuration, built-in NAT

D-Link 2560 Office Firewall

Built-in encryption, whitelisting and blacklisting, Intrusion detection systems, built-in antivirus, stateful packet inspection, Combines multiple firewall types, built-in NAT and VPN

Check Point Firewall

Hybrid between packet filtering and application gateway, capable of protecting against SYN and oversized packets automatically, Includes intrusion prevention systems, has protections against zero-day threats, supports VPN connections

Capabilities of Cisco Next-Generation Firewalls (Adaptive Security Appliances (ASA))

VPNs, Intrusion prevention systems, Content filtering, Unified communications security