Network Defense and Countermeasures

These flashcards cover key concepts related to firewalls and network defense from the lecture on Firewall Practical Applications.

Firewall

A network security device that monitors and controls incoming and outgoing network traffic.

Single Machine Firewalls (SMFs)

Firewalls used on individual PCs in home offices or workstations; they provide basic security.

Packet filtering

A method used by firewalls to control network traffic by analyzing packets against predefined rules.

Ease of use

A key characteristic of single machine firewalls, indicating they are user-friendly and simple to configure.

SMF Target Market

Primarily home users who need basic security.

Windows 10 Firewall

A free, fully-functional firewall that blocks inbound and outbound packets and is configurable via an app.

User Account Control (UAC)

A Microsoft Windows feature that prevents unauthorized changes to the operating system.

Linux Firewall - Iptables

The primary firewall solution for Linux, using tables, chains, and rules.

Symantec Norton Firewall

A firewall included with Norton Security Suite featuring basic packet filtering and outbound traffic blocking.

McAfee Personal Firewall

A firewall that blocks traffic, tracks attacks, and includes basic intrusion detection.

Small Office/Home Office (SOHO)

Affordable firewall solutions designed for small office setups, including Norton and McAfee.

SonicWALL TZ series

A line of firewalls designed for small offices, offering stateful packet inspection and built-in encryption.

D-Link 2560 Office Firewall

A firewall with built-in antivirus, intrusion detection systems, and whitelisting/blacklisting features.

Medium-Sized Network Firewalls

Firewalls designed to support networks with 25 to several hundred users.

Check Point Firewall

A firewall that combines packet filtering and application gateway features, suitable for medium-sized networks.

Cisco Next-Generation Firewalls

Adaptive Security Appliances (ASA) that provide advanced security features and require moderate configuration skills.

WAN Connection

A wide area network connection commonly associated with enterprise-level firewalls.

Intrusion Prevention Systems (IPS)

Systems designed to detect and prevent identified threats in a network.

Network Address Translation (NAT)

A method used by routers and firewalls for remapping an IP address space into another.

Built-in Antivirus

A feature of some firewalls that scans for and removes malicious software.

Stateful Packet Inspection

A firewall method that keeps track of the state of active connections and allows packets through that match a known active connection.

Content Filtering

A feature that allows firewalls to block or allow access to specific content on the web.

Customized Rules

User-defined protocols and operations that control how firewalls handle traffic.

Zero-Day Threats

Exploits that occur on the same day a vulnerability is discovered.

Advanced Security App

The interface used for managing firewall rules and settings in Windows.

Firewall Logging

The process of maintaining a record of allowed and denied traffic for analysis.

Ease of Configuration

A desirable feature that ensures firewall settings can be adjusted with minimal technical skill.

Hybrid Firewalls

Firewalls that incorporate multiple types of protection strategies, such as packet filtering and application gateway.

Home Office Firewalls

Security solutions tailored specifically to individual users working from home.

Administrative Team

A group responsible for managing the configuration and upkeep of the firewall.

VPN Connections

Secure connections established over the internet to remote networks.

Traffic Source

The origin point of network traffic, which can be configured within firewall rules.

Basic Intrusion Detection

The initial layer of protection that monitors for suspicious activities in the network.

Overall Network Size

The size of a network often determines the firewall solution required.

Cybersecurity Curriculum

A structured educational program designed to teach participants about security measures and practices in technology.

Packet Alteration

A method of changing data packets while they are in transit between sender and receiver.

Installed Solutions

Firewall programs or devices that are set up and integrated within a network.

Application Gateway

A firewall configuration that filters traffic at the application layer, ensuring more thorough examination of data.

Policy Management

The process of creating and enforcing rules that govern network security.

Firewall Solutions Comparison

Evaluating various firewall options based on their features and appropriateness for specific situations.