09防火墙(国外英语资料).doc

09防火墙(国外英语资料) In this paper, by flyjty contribution Powerpoint documents may be a poor experience at the WAP end. It is recommended that you choose TXT, or download the source file to the native view. Computer system security chapter 9 one A firewall overview What is a Firewall? Firewall: a hardware and software protection facility that is set up between two networks of trust to strengthen access control. 2 A firewall overview Use of firewalls 1) to limit the entry or departure of information as a "choke point"; 2) prevent intruders from approaching and damaging your internal facilities; 3) monitoring, recording and reviewing important business flows; 4) implement network address translation and alleviate address shortage conflicts. The firewall allows only authorized business flows to pass, and it should be resistant to penetrating attacks. To establish a firewall, you must consider the security policy in a comprehensive way, otherwise it will not be the same. 3 A firewall overview Good firewall system The data transferred between the internal network and the external network must be passed through the firewall; Only data allowed by security policies in the firewall system can be passed through the firewall. 3) the firewall itself is not affected by all kinds of attacks. 4 A firewall overview The advantages of firewalls Prevent vulnerable services by filtering unsafe services to reduce the risk of the primary system on the subnet. Some vulnerable services, such as NFS, can be banned from entering or leaving protected subnets. Attacks based on routing options can be protected, such as source routing options and attempts to turn the routing path to the compromised network via ICMP. 5 A firewall overview Control access point system provides access control to the system. If you are allowed to access a host (Mail Server and Web Server) from the outside, you will not be able to access another host. 3. The focus of the definition of security firewall security rules can be