Transport Layer - Firewalls

Overview of Firewalls

• Definition: A firewall is a network device that blocks traffic based on specified criteria, crucial for network security.

Importance of Firewalls

• Network Protection: Firewalls serve as the primary defense against unwanted traffic entering a network.
• Traffic Management: They help manage and control data flow within a network, ensuring security and operational integrity.

Operation of Firewalls

• Layer Operations: Firewalls can function at different layers of the network, with a significant focus on:
  • Application Layer: Inspecting application-level traffic for threats.
  • Transport Layer: Blocking or allowing traffic to specific ports.

Example - Small Business Network

• A small business may have a server with:
  • Web Server: Hosting the company's public website (typically using port 80).
  • File Server: Storing confidential internal documents (requiring restricted access).
• Firewall Configuration:
  • Allow incoming traffic to port 80 for web access.
  • Block external IP access to other ports to protect sensitive file server information.

Types of Firewalls

• Independent Devices: Firewalls can be standalone hardware devices.
• Integrated Devices: Commonly, routers include firewall functionality for both home and business users.
• Host-based Firewalls: Operating systems such as Windows and macOS include built-in firewall features, allowing traffic management at the individual host level.

Conclusion

• Firewalls are essential for network security, playing a significant role in both small and large networks by regulating traffic based on defined security policies.