常见防火墙的类型(国外英语资料).doc

常见防火墙的类型(国外英语资料) There are two main types of firewall types: packet filtering and proxy firewalls, each with its own pros and cons: Packet Filtering Packet filtering is a network security protection mechanism that controls the flow of data flowing out and into the network. By controlling the type of network traffic that exists in a certain network segment, packet filtering can control the way that the service is present in a certain network segment. Those that do not comply with cyber security will be severely restricted. Based on the type of protocol and the value of the protocol field in the package, the filter router can distinguish the network traffic. Based on protocol specific standards, the routers ability to differentiate packages and limit packets on its ports is called Packet Filtering. For this reason, a Filter Router can also be called a Packet Filter Router. Advantages of packet filtering: * a filter router can help protect the entire network One of the main advantages of packet filtering is that a single, properly placed packet filtering router helps protect the entire network. If there is only one router connect internal and external network, regardless of the size of the internal network, internal topology structure, through the router packet filtering, gained a good effect on network security protection. * packet filtering is transparent to users Not as described in the behind of the agent (Proxy), the packet filter does not require any custom or client configuration software, it also does not require any special training or operation. When the packet filter router decides to let the packet pass, it is no different from a regular router. The ideal scenario is that even the user will not recognize it unless they try to do what is forbidden in the filter rule. A strong transparency is one of the advantages of packet filtering. * filtering routers are fast and efficient A Proxy, the corresponding filtering router only check header fields, generally don