webmaster网络安全讲座第三讲 防火墙技术（Lecture on webmaster network security Lecture 3 firewall technology）.docVIP

webmaster网络安全讲座第三讲 防火墙技术（Lecture on webmaster network security Lecture 3 firewall technology） Consisting of a series of complex machines and programs. In simple terms, the main concept of todays firewalls is the application of multiple components. By now you will be ready to implement your firewall. You need to know what kind of service your company needs and what services are valid for both internal and external users. Firewall tasks Firewalls are critical in the implementation of security. A firewall policy meets four goals, and each target is usually not implemented by a single device or software. In most cases, components of a firewall are used together to meet the companys security needs. The firewall will ensure that the following four goals are met Implement a companys security policy The primary purpose of the firewall is to enforce your security policy. The previous course mentioned the importance of security policy in appropriate network security. For example, perhaps your security policy simply limits the SMTP traffic on the MAIL server, so you must enforce these policies directly on the firewall. Create a blocking point The firewall creates a checkpoint on a companys private network and a sub network. This implementation requires that all traffic pass through this checkpoint. Once these checkpoints are clearly established, the firewall device can monitor, filter and check all incoming and exit traffic. The network security industry called these checkpoints blocking points. By forcing all incoming and outgoing traffic through these checkpoints, network administrators can focus on less than one side to achieve security purposes. Without such a point for monitoring and controlling information, the system or security administrator will monitor it in large numbers. Another name for checkpoints is called network boundaries. Log Internet activity Firewalls can also enforce logging and provide alert capabilities. By implementing logging services on the firewall,