Skip to main content

FIREWALL


WAHT IS A FIREWALL

1. Firewall Is A Network Security Device Which Is Used To Manage And Filter The Incoming And Outgoing Network Traffic. 

2. Firewall Is Handle Or Filter The Traffic Between Private And Public Network. The Main Function Of Firewall Is To Manage The Unwanted Access Over A Network And Also Out The Unfaith Traffic From The Network. 

3. Firewall Exist Since 1980's To Filter The Packet Over The Network. 

THERE ARE MANY TYPES OF FIREWALL

 1. Packet Filtering Proxy Services · 

2. Stateful Inspection
 
3. Next Generation Firewall.

WORIKING OF FIREWALL

1. Firewall Basically Work To Filter The Traffic And Remove The Malicious Activity Firewall Block The Malicious Access Over A Network It Senses Quickly And Detect The Outside Attack And Also Notify The Legitimate User Over A Network.

2. Especially Next Generation Firewalls, Focus On Blocking Malware And Application-Layer Attacks.

PACKET FILTERING INSPECTION

Packet Filtering Is A Firewall Technique Used To Control Network Access By Monitoring Outgoing And Incoming Packets And Allowing Them To Pass Or Halt Based On The Source And Destination Internet Protocol (IP) Addresses, Protocols And Ports.



____________


STATEFUL  INSPECTION

A Stateful Inspection Firewall Is A Type Of Firewall That Tracks And Monitors The State Of Active Network Connections. This Allows The Firewall To Make More Informed Decisions About Whether To Allow Or Deny Traffic, As It Can See The Context Of The Traffic And How It Relates To Existing Connections.

Stateful Inspection Firewalls Work By Examining The Headers Of Network Packets. The Headers Contain Information About The Source And Destination Of The Packet, The Protocol Being Used, And The Type Of Data Being Transferred. The Firewall Uses This Information To Track The State Of Each Connection And To Determine Whether The Traffic Is Allowed Or Denied.

Stateful Inspection Firewalls Are More Secure Than Stateless Firewalls, Which Only Examine The Headers Of Network Packets. Stateless Firewalls Can Only See The Source And Destination Of A Packet, So They Cannot See The Context Of The Traffic Or How It Relates To Existing Connections. This Makes Them More Vulnerable To Attacks That Exploit The State Of Network Connections.

____________

NEXT GENERATION FIREWALL(NGFW)

A NEXT-GENERATION FIREWALL (NGFW) IS A NETWORK SECURITY DEVICE THAT PROVIDES ADVANCED FEATURES BEYOND TRADITIONAL FIREWALLS, SUCH AS APPLICATION AWARENESS AND CONTROL, INTEGRATED INTRUSION PREVENTION, AND THREAT INTELLIGENCE. NGFWS CAN HELP ORGANIZATIONS TO PROTECT THEIR NETWORKS FROM A WIDE RANGE OF THREATS, INCLUDING MALWARE, INTRUSION PREVENTION, AND APPLICATION-LAYER ATTACKS.

____________

Comments

Popular posts from this blog

TCP/IP MODEL

  HISTORY OF TCP/IP MODEL THE TCP/IP MODEL WAS DEVELOPED BY VINT CERF AND BOB KAHN IN THE 1970S. THEY WERE BOTH WORKING AT THE DEFENSE ADVANCED RESEARCH PROJECTS AGENCY (DARPA) AT THE TIME. Vint Cerf And Bob Kahn CERF AND KAHN WERE TASKED WITH DEVELOPING A NEW NETWORK PROTOCOL THAT WOULD BE MORE RELIABLE AND EFFICIENT THAN THE EXISTING PROTOCOLS. THEY CAME UP WITH THE IDEA OF USING A LAYERED APPROACH, WHICH WOULD ALLOW EACH LAYER TO FOCUS ON A SPECIFIC TASK. THIS LED TO THE DEVELOPMENT OF THE TCP/IP MODEL, WHICH IS STILL THE BASIS FOR HOW DATA IS TRANSMITTED OVER THE INTERNET TODAY. CERF AND KAHN ARE OFTEN REFERRED TO AS THE "FATHERS OF THE INTERNET" FOR THEIR WORK ON THE TCP/IP MODEL. THEY WERE INDUCTED INTO THE NATIONAL INVENTORS HALL OF FAME IN 2004 FOR THEIR CONTRIBUTIONS TO THE DEVELOPMENT OF THE INTERNET. HERE ARE SOME OTHER NOTABLE PEOPLE WHO CONTRIBUTED TO THE DEVELOPMENT OF THE TCP/IP MODEL: JON POSTEL: POSTEL WAS THE FIRST CHAIRMAN OF THE INTERNET ENGINEERI...

Types Of Attack in Network

Common Network Attacks Explained. 1. Overwhelming a Network (DoS/DDoS): Imagine a restaurant that's flooded with too many customers. In a DoS/DDoS attack: A website is overwhelmed with too much traffic. 2. Eavesdropping on Conversations (MitM): Imagine someone listening in on your phone call. In a MitM attack: An attacker listens to your online conversations. 3. Tricking You (Phishing): Imagine receiving a fake email from your bank. In phishing: Attackers try to trick you into giving them your personal information. 4. Finding a Weakness in a Website (SQL Injection): Imagine finding a hole in a fence. In an SQL injection attack: An attacker finds a weakness in a website to steal or change data. 5. Planting a Hidden Camera (XSS): Imagine someone hiding a camera in a party. In an XSS attack: An attacker hides harmful code on a website to spy on you. 6. Guessing Your Password (Password Attck): Imagine trying to guess a friend's password. In a pas...

OSI Refrance Model

OSI MODEL 1. THE OSI MODEL WAS DEVELOPED BY THE INTERNATIONAL ORGANIZATION FOR STANDARDIZATION (ISO) IN THE LATE 1970S. THE MAIN ARCHITECT OF THE OSI MODEL WAS HUBERT ZIMMERMANN, A FRENCH SOFTWARE ENGINEER. 2.  ISO REPRESENT A 1947 MORE THAN WORK AND AGAIN REPRESENTS A ISO IN 1977 AND MORE THAN WORK AN REPRESENT  IN 1983 A OSI REDFRENCE MODEL. 2. HIS MODEL REPRESENT A 7 LAYER 3. OSI MEANS  (OPEN SYSTEMS INTERCOMMUNICATIO). 1. APPLICATION LAYER 1. THE APPLICATION LAYER IS USED BY END-USER SOFTWARE SUCH AS WEB BROWSERS AND EMAIL CLIENTS.  IT PROVIDES PROTOCOLS THAT ALLOW SOFTWARE TO SEND AND RECEIVE INFORMATION AND PRESENT MEANINGFUL DATA TO USERS. 2.  IT SENDS ITS DATA TO THE FORM OF THE  PDU. PROTOCLS  AND DEVICES USED IN LAYER THERE ARE SOME PROTOCOLS THAT WORK AT THE BACKEND OF THE APPLICATION LAYER. WHICH IN TURN WORKS AT THE APPLICATION LAYER. MANY DEVICES USE IT AT THE APPLICATION LAYER. PROTOCOLS FTP  (FILE TRANSOFER PROTOCOL) DNS (DOMA...