Monday, September 14, 2020

Firewalls


 

     What is a Firewall ?

     A Firewall is a  system which continuosly  monitors  the traffic in a network for both

    incoming and outgoing .It tracks analyse and decide whether to allow  or  block 

     network  traffic  based on  certain rules and regulations.

     Firewalls guard traffic  at computer's entry  point  called ports where information

     is exchanged  within  external  ports.Firewall can be both hardware and software

     but if you are working in a network it is very much necessary to  guard your

     system by using both  types  of  firewall.

 

    Types of Firewalls:

      1. NGWF: Next Generation Firewalls 

       



 The Next Generation Firewall is a recent firewall technology which is used 

 to block modern day threats and attacks in network security.

 It includes Deep Packet Inspection which inspects the  data within

 the packet itself.

The NGFW is meant to serve many other security areas such as

 1. Blocking of apps which may pose threats to your device

 2. Informing about threats from a particular website or network

 

2.Statefull Multilayer Inspection Firewall :


 

This Firewall examine the packets and allow them to enter the network based on 

port , protocol and state. They examine packets to ensure that all the 

communication  that is taking place are coming  from  the trusted source.

 

3. Proxy Firewall :


 

 

Proxy Firewall act as an Intermediary between two end system. It serves as  

a gateway from one network to another for a specific application.It provides 

additional functionality  by  preventing  direct  connections  from  outside

the network.


4. Network Address Translation Firewalls:


 

Basically Network Address Translation Firewall is similar  to Proxy Firewall 

where it act as an Intermediary between group of computers and outside network.

Here in this type of Firewall a group of computers with different network 

address is connected to the internet with single IP address. In this way the 

attackers are mis-leaded by not letting them identify the IP address of

specific system thereby providing greater security against attacks .

 

 



 

 

 

          

   


No comments:

Post a Comment