Chapter 01-Firewall Planning and Design.pptVIP

Firewall Planning and Design Chapter 1 Learning Objectives Understand the misconceptions about firewalls Realize that a firewall is dependent on an effective security policy Understand what a firewall does Describe the types of firewall protection Understand the limitations of firewalls Determine the best hardware and software selections for your firewall Misconceptions about Firewalls Misconception Designed to prevent all hackers, viruses, and would-be intruders from entering Reality Enable authorized traffic to pass through Block unauthorized traffic Misconceptions about Firewalls Misconception Once deployed, firewalls operate on their own Reality Work best when part of Defense in Depth (DiD) security Need constant maintenance Misconceptions about Firewalls What Is a Security Policy? Set of rules and procedures developed by management in conjunction with security professionals Acceptable/unacceptable use of network What resources need to be protected How the company will respond to breaches of security Components of a Security Policy List of physical, logical, and network assets to be protected Specifications on how communications across the firewall will be audited Acceptable Use Policy that tells employees what constitutes acceptable use of company resources Description of organization’s approach to security and how it affects the firewall What Is a Firewall? Hardware or software that monitors transmission of packets of digital information that attempt to pass the perimeter of a network Performs two basics security functions Packet filtering Application proxy gateways Firewalls Provide Security Features Log unauthorized accesses into/out of a network Provide a VPN link to another network Authenticate users Shield hosts inside the network from hackers Cache data Filter content that is considered inappropriate or dangerous Firewalls Provide Protection for Individual Users Keep viruses from infecting files Prevent Trojan horses from entering the system through back