firewall
Introduction
Title: Firewalls
Author: Dr. Satyendr Singh, Assistant Professor, Department of CSE, BML Munjal University, Gurugram
The Importance of Firewalls
The rise of the Internet allows global connectivity between computers, creating both opportunities and challenges.
Individuals and corporations benefit from connectivity; however, network security becomes a significant concern for network support staff.
Protecting corporate networks from diverse attacks is a critical task.
Types of Network Attacks
Attacks are broadly categorized into:
Data Leakage: Corporations store valuable and confidential data; leaks can harm competitive advantage.
External Threats: Threats from outside elements, such as viruses and worms, can infiltrate corporate networks.
Network Risks Overview
Inside threats: Information can leak from the corporate network to the Internet via routers.
Outside threats: Viruses and malicious entities can enter through weak points in the network.
Mechanisms for Protection
To safeguard information:
Implement encryption to protect outbound data. Encrypted data is unreadable to those without decryption keys, preserving the confidentiality of information at risk of exposure.
Firewalls serve as preventive measures against external attacks, ensuring that unauthorized access is blocked.
Role of Firewalls
Firewalls act as a barrier between the internal corporate network and external networks:
All incoming and outgoing traffic must pass through the firewall.
The firewall determines whether to allow or deny the traffic based on security policies.
Characteristics of a Good Firewall
Essential characteristics include:
Traffic monitoring: All traffic must be routed through the firewall for inspection.
Compliance with security policies: Only authorized traffic should be permitted.
Resilience: The firewall must be robust against attacks aimed at it.
Types of Firewalls
Firewalls are classified based on filtering criteria into:
Packet Filters: Examine packets against predefined rules to allow or block traffic.
Application Gateways: Also known as proxy servers, work at the application layer to handle requests and manage connections.
Packet Filters
Description:
Packet filters use a set of rules to filter out packets and are typically implemented via routers.
Filtering Process:
Analyze each packet upon arrival.
Apply rules based on fields in the IP and TCP/UDP headers (e.g., source & destination addresses, ports).
If rules match, either accept or discard the packet; if no match, rely on default settings (usually discard).
Advantages:
Fast operation and transparency to users.
Disadvantages:
Complex setup of rules and limited support for authentication.
Application Gateways
Description:
Function as intermediaries by receiving requests then contacting external servers on behalf of users.
Operation:
Users initiate requests to the application gateway via a TCP/IP application.
The gateway prompts for remote host details and user credentials.
The gateway contacts the external host and transmits packets for the user, thereby masking the user's IP.
Security:
More secure than packet filters since access is determined at the application level.
Disadvantages:
Increased overhead from managing two connection sets (user to gateway and gateway to remote host).
Firewalls
Introduction
Title: FirewallsAuthor: Dr. Satyendr Singh, Assistant Professor, Department of CSE, BML Munjal University, Gurugram
Importance of Firewalls
The Internet connects computers all around the world, making it easier for people and companies to share information. While this is very helpful, it also brings problems related to security. Businesses need to protect their networks from various types of cyber attacks to keep their important data safe and maintain trust with their customers.
Types of Network Attacks
Data Leakage: Important and secret information can accidentally be shared, which can hurt a company's competitiveness and cause financial losses.
External Threats: These are attacks from outside the organization, such as viruses or worms, that can harm computer networks.
Overview of Network Risks
Network threats can come from two main sources:
Inside Threats: Information may leak from the company's network to the outside world, often due to mistakes or malicious intent by insiders.
Outside Threats: Attackers from the outside can try to invade the network through weaknesses in the system.
How to Protect Against Threats
To prevent threats and keep information secure, follow these steps:
Use Encryption: This process scrambles information, making it unreadable to anyone who intercepts it, ensuring that only authorized users can access it.
Set Up Firewalls: Firewalls are essential tools that block unwanted access to your network, acting like security guards at the entrance.
Role of Firewalls
Firewalls are crucial for network security because they act as a barrier between the internal network (like a company’s computers) and external networks (the Internet).
Traffic Verification: All data entering and leaving the network must go through the firewall, which checks whether to allow or block the traffic based on rules already set up.
Features of a Good Firewall
An effective firewall should have the following key features:
Traffic Monitoring: It should inspect all traffic trying to enter or exit the network.
Policy Compliance: It must only allow approved traffic based on security policies.
Resilience: It should be strong enough to withstand various types of attacks.
Types of Firewalls
Firewalls can be divided into two main types based on how they filter traffic:
Packet Filters: These firewalls check individual packets of data against established rules.
Application Gateways: Also known as proxy servers, these operate at a higher level by managing requests and connections for users.
Packet Filters
What They Do: Packet filters look at incoming and outgoing data packets and decide whether to pass them based on specific criteria.
How They Work:
Check each packet when it arrives.
Use rules based on IP addresses and port numbers to determine whether to accept or discard the packet.
If a packet doesn’t meet any rules, it is usually discarded.
Advantages:
Fast and efficient for users.
Disadvantages:
Can be complicated to set up, and not all of them provide strong identity verification.
Application Gateways
What They Do: These gateways act as middlemen between users and external servers, adding another layer of protection.
How They Work:
Users send requests to the application gateway, which then connects to the desired server on behalf of the user.
This masks the user’s IP address, enhancing security.
Advantages:
More secure since they check requests at an application level.
Disadvantages:
Slightly slower due to managing two connections (one for the user, one for the external server).
Conclusion
Understanding firewalls is essential for protecting networks from cyber threats. By implementing firewalls and using encryption, companies can secure their important data and maintain their reputation in a digital world.
Introduction
Title: FirewallsAuthor: Dr. Satyendr Singh, Assistant Professor, Department of CSE, BML Munjal University, Gurugram
Importance of Firewalls
The Internet connects computers all around the world, making it easier for people and companies to share information. While this is very helpful, it also brings problems related to security. Businesses need to protect their networks from various types of cyber attacks to keep their important data safe and maintain trust with their customers.
Types of Network Attacks
Data Leakage: Important and secret information can accidentally be shared, which can hurt a company's competitiveness and cause financial losses.
External Threats: These are attacks from outside the organization, such as viruses or worms, that can harm computer networks.