Flashcards
NETWORK SECURITY | MANAGING SECURE NETWORKS | Firewall Rule Management
Cards in this deck (11)
- 1____ protect networks and they control access to _____ _______.Firewalls
network borders - 2_____ ______ define how the firewall should act when it sees a new connection requestFirewall rules
- 3If firewall rule matches description of a connection, an action is followed by that rule. If firewall have no instructions, the firewall follows the ______ ______ principle and blocks traffic.default deny
- 4EXAMPLE: Firewall rule for simple network w/3 rules ------------------------------------------- *Allow web traffic to a web server on port 80, *allow SMTP e-mail traffic to the e-mail server on port 25 *block everything else
- 5EXAMPLE a packet arrives at the firewall from an external source, the firewall checks it against these rules. ---------------------------------------- For example, *a packet arrives to e-mail server on port 25 *the firewall checks rules in order, from top to bottom. *It checks rule 1- neither port nor destination match *it moves to rule 2 and finds that it does match. *The firewall carries out the specified action to allow the traffic.
- 6Firewall rules often contain thousands of rules - one most important responsibility of administrator is to manage rule base, particularly to _______ _______.configuration errors
- 7Name 3 firewall configuration errors in a rule baseshadowed rule
promiscuous rule
orphaned rule - 8occurs when a rule base contains a rule that'll never be executed because of its placement in the rule baseshadowed rule
- 9rules that allow too much access or a lack of understanding of how a system functions or even a simple typopromiscuous rule
- 10this rule violates the principle of least privilege and can jeopardize system securitypromiscuous rule
- 11When a system or service is decommissioned but rules are never removed from the firewallorphaned rules
Information
- Description
- 1. Firewall Rule Management | 2. Router Configuration Security| 3. Switch Configuration Security | 4. Maintaining Network Availability | 5. Network Monitoring | 6. Simple Network Management Protocol (SMTP) | 7. Storage Networks
- Created by
- Kimberly Stover
- Views
- 0
- History
-
- Created by Kimberly Stover · Feb 14, 2017
- Copied by Kimberly Stover · Mar 8, 2017
- Copied by Kimberly Stover · Apr 20, 2017
- Copied by Kimberly Stover · May 12, 2017
- Rating