常见防火墙的类型（Types of common firewalls）.docVIP

常见防火墙的类型（Types of common firewalls） There are two main types of common firewalls: packet filtering and proxy firewalls, each with its own advantages and disadvantages: Packet filtering (Packet, Filtering) Packet filtering is a network security protection mechanism, which is used to control the data flowing out and flowing into the network. By controlling the type of network traffic that exists in a network segment, packet filtering can control the way a service exists on a network segment. Services that are not in line with network security will be severely restricted. In the packet protocol type and the protocol field based on the value of filter router can distinguish network traffic; protocol specific criteria based on the ability to distinguish between packet and router can limit packet call packet filter in the port (Packet Filtering). It is for this reason that a filter router can also be called a packet filter router (Packet Filter Router). The advantages of packet filtering: * a filtering router can assist in protecting the entire network One of the main advantages of packet filtering is that a single, properly placed packet filtering router helps protect the entire network. If only one router to connect the internal and external network, internal topology size, regardless of the internal network, the packet filtering through the router, it has achieved good results in network security protection. * packet filtering is transparent to users Unlike the Proxy described later, packet filtering does not require any custom software or client configuration, nor does it require any special training or operation of the user. When packet filtering routers decide to pass data packets, it is no different from regular routers. Ideally, even users will not recognize it unless they try to do what is forbidden in the filter rules. Strong transparency is one of the major advantages of packet filtering. * filtering router with high speed and high efficiency Compared with Prox