Karteikarten
NETWORK SECURITY | NETWORK SECURITY DEVICES | Firewalls
Karten in diesem Stapel (14)
- 1The security guard of a networkFirewalls
- 2Anything crossing perimeters to/from internet must be evaluated by firewall
- 3DMZDemilitarized zone
- 4Firewalls connect what 3 networks:Internet
An internal network
DMZ (demilitarized zone) - 5contains systems that must accept direct connections from the outside world, such as public web servers Isolates systems due to risk of compromise Protects internal network from compromised DMZ systemsDMZ
- 6Central point for network traffic in connecting networks togetherrouters
- 7Analyzes all attempts to connect to systems on a network determining whether request are allowed or deniedfirewall
- 8• Sits at network perimeter between router and internetfirewall
- 9• Can see all inbound/outbound connectionsFirewall
- 10Decides on best path for traffic to final destinationrouter
- 11• Use access control list to limit traffic entering or leaving networkrouter
- 12Stateful inspections allows firewalls to keep track of open connections give an exampleuser on the internal network requests a webpage from server, the firewall notes request, and allows the web server to respond and the two systems to communicate without reevaluating the request each time a new packet appears at the firewall.
- 13what are 4 firewall rules used at new connection requestAddress of source system affected by rule
IP Address of destination system affected by rule
Destination port and protocol
Action to allow/deny when encountering traffic matching all other rules - 14• Allow/deny tells the firewall to permit/block traffic that matches description of ruleweb server located in our DMZ with IP address 10.15.100.1. We want users on the internet to access that system, we must write a firewall rule that permits access from the internet into the DMZ. This is a rule that permits access, so we set the action to Allow. In this case, the connection request would be coming from an unknown internet system to the web server.
Informationen
- Beschreibung
- 1. Switches and Routers | 2. Firewalls | 3. Load Balancers, proxies, and web security gateways | 4. VPNs and VPN concentrators | 5. Network intrusion detection and prevention | 6. Protocol analyzers | 7. Unified threat management
- Erstellt von
- Kimberly Stover
- Aufrufe
- 1
- Verlauf
-
- Erstellt von Kimberly Stover · 14 Feb 2017
- Kopiert von Kimberly Stover · 14 Mär 2017
- Kopiert von Kimberly Stover · 17 Mär 2017
- Kopiert von Kimberly Stover · 17 Mär 2017
- Kopiert von Kimberly Stover · 20 Mär 2017
- Kopiert von Kimberly Stover · 20 Mär 2017
- Kopiert von Kimberly Stover · 20 Mär 2017
- Bewertung