Skip to main content

FIREWALL


WAHT IS A FIREWALL

1. Firewall Is A Network Security Device Which Is Used To Manage And Filter The Incoming And Outgoing Network Traffic. 

2. Firewall Is Handle Or Filter The Traffic Between Private And Public Network. The Main Function Of Firewall Is To Manage The Unwanted Access Over A Network And Also Out The Unfaith Traffic From The Network. 

3. Firewall Exist Since 1980's To Filter The Packet Over The Network. 

THERE ARE MANY TYPES OF FIREWALL

 1. Packet Filtering Proxy Services · 

2. Stateful Inspection
 
3. Next Generation Firewall.

WORIKING OF FIREWALL

1. Firewall Basically Work To Filter The Traffic And Remove The Malicious Activity Firewall Block The Malicious Access Over A Network It Senses Quickly And Detect The Outside Attack And Also Notify The Legitimate User Over A Network.

2. Especially Next Generation Firewalls, Focus On Blocking Malware And Application-Layer Attacks.

PACKET FILTERING INSPECTION

Packet Filtering Is A Firewall Technique Used To Control Network Access By Monitoring Outgoing And Incoming Packets And Allowing Them To Pass Or Halt Based On The Source And Destination Internet Protocol (IP) Addresses, Protocols And Ports.



____________


STATEFUL  INSPECTION

A Stateful Inspection Firewall Is A Type Of Firewall That Tracks And Monitors The State Of Active Network Connections. This Allows The Firewall To Make More Informed Decisions About Whether To Allow Or Deny Traffic, As It Can See The Context Of The Traffic And How It Relates To Existing Connections.

Stateful Inspection Firewalls Work By Examining The Headers Of Network Packets. The Headers Contain Information About The Source And Destination Of The Packet, The Protocol Being Used, And The Type Of Data Being Transferred. The Firewall Uses This Information To Track The State Of Each Connection And To Determine Whether The Traffic Is Allowed Or Denied.

Stateful Inspection Firewalls Are More Secure Than Stateless Firewalls, Which Only Examine The Headers Of Network Packets. Stateless Firewalls Can Only See The Source And Destination Of A Packet, So They Cannot See The Context Of The Traffic Or How It Relates To Existing Connections. This Makes Them More Vulnerable To Attacks That Exploit The State Of Network Connections.

____________

NEXT GENERATION FIREWALL(NGFW)

A NEXT-GENERATION FIREWALL (NGFW) IS A NETWORK SECURITY DEVICE THAT PROVIDES ADVANCED FEATURES BEYOND TRADITIONAL FIREWALLS, SUCH AS APPLICATION AWARENESS AND CONTROL, INTEGRATED INTRUSION PREVENTION, AND THREAT INTELLIGENCE. NGFWS CAN HELP ORGANIZATIONS TO PROTECT THEIR NETWORKS FROM A WIDE RANGE OF THREATS, INCLUDING MALWARE, INTRUSION PREVENTION, AND APPLICATION-LAYER ATTACKS.

____________

Comments

Post a Comment

Popular posts from this blog

BRIDGE MODE AND NAT MODE AP

  BOTH BRIDGE MODE AND NAT MODE ARE WAYS TO CONFIGURE AN ACCESS POINT (AP) TO EXTEND A NETWORK, BUT THEY DIFFER IN HOW THEY HANDLE IP ADDRESSES AND NETWORK TRAFFIC: BRIDGE MODE: CONCEPT: ACTS AS A TRANSPARENT BRIDGE, SIMPLY RELAYING DATA BETWEEN WIRED AND WIRELESS DEVICES. IP ADDRESS: DEVICES OBTAIN THEIR IP ADDRESSES FROM AN UPSTREAM DHCP SERVER, TYPICALLY THE MAIN ROUTER ON THE NETWORK. NETWORK TRAFFIC: ALL DEVICES, BOTH WIRED AND WIRELESS, ARE SEEN AS PART OF THE SAME NETWORK AND CAN DIRECTLY COMMUNICATE WITH EACH OTHER. BENEFITS: SEAMLESS ROAMING: DEVICES CAN EFFORTLESSLY SWITCH BETWEEN APS WITHOUT LOSING THEIR IP ADDRESS OR CONNECTION. SIMPLIFIED NETWORK MANAGEMENT: ALL DEVICES ARE ON THE SAME SUBNET, MAKING CONFIGURATION AND TROUBLESHOOTING EASIER. INCREASED COMPATIBILITY: WORKS WITH DEVICES THAT DON'T SUPPORT NAT TRAVERSAL (E.G., SOME VPN CLIENTS). DRAWBACKS: LESS SECURITY : ALL DEVICES ARE DIRECTLY EXPOSED TO EACH OTHER, POTENTIALLY INCREAS
Post a Comment
Read more

What Is A Ip Excluded Address

  AN IP EXCLUDED ADDRESS IS AN IP ADDRESS THAT HAS BEEN CONFIGURED ON A DHCP SERVER TO BE EXCLUDED FROM THE POOL OF ADDRESSES THAT CAN BE ASSIGNED TO DHCP CLIENTS.  THIS IS TYPICALLY DONE TO RESERVE IP ADDRESSES FOR SPECIFIC DEVICES, SUCH AS PRINTERS, SERVERS, OR OTHER NETWORK DEVICES THAT NEED TO HAVE A STATIC IP ADDRESS. IP EXCLUDED ADDRESSES CAN ALSO BE USED TO PREVENT DHCP CLIENTS FROM RECEIVING IP ADDRESSES THAT ARE ALREADY IN USE BY OTHER DEVICES ON THE NETWORK.  THIS CAN HELP TO AVOID IP ADDRESS CONFLICTS AND IMPROVE NETWORK PERFORMANCE. TO CONFIGURE AN IP EXCLUDED ADDRESS ON A DHCP SERVER, YOU WILL NEED TO KNOW THE IP ADDRESS THAT YOU WANT TO EXCLUDE. ONCE YOU HAVE THE IP ADDRESS, YOU CAN USE THE APPROPRIATE DHCP SERVER CONFIGURATION COMMANDS TO ADD THE IP ADDRESS TO THE EXCLUSION LIST. SOME EXAMPLES OF WHEN YOU MIGHT WANT TO USE IP EXCLUDED ADDRESSES: TO RESERVE AN IP ADDRESS FOR A SPECIFIC DEVICE, SUCH AS A PRINTER OR SERVER. TO PREVENT DHCP CLIENTS FROM RECEIVING I
Post a Comment
Read more

DOS AND DDOS ATTACK

A Dos (Denial-Of-Service) Attack and A DDOS (Distributed Denial-Of-Service) Attack Are Both Attempts to Make a Computer System or Network Resource Unavailable to Legitimate Users. However, They Differ in How They Achieve This: Dos Attack: Imagine A Single Person Throwing Rocks at A Castle Gate. A This Person Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attacker Keeps Throwing Rocks, Trying to Overwhelm the Gate's Defenses and Gain Entry. Dos Attacks Are Typically Launched from A Single System. They Can Be Effective Against Small Systems or Networks, But Larger Systems Can Often Withstand Them. DDos Attack: Imagine An Army Throwing Rocks at A Castle Gate. This Army Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attackers Coordinate Their Attack, Throwing Rocks from Multiple Directions at Once.
Post a Comment
Read more