What is a Firewall?
A Firewall is a network security device positioned between the Internet (Public Network) and your Internal (Private) network. They track and control communications, deciding whether to allow, reject or encrypt communications.
A Firewall ensures that all communications between your private network and the public network (the Internet) meet your organization's security policy.
In addition to protecting your private network from Internet threats, firewalls are increasingly being deployed to protect computers with sensitive information (i.e. Human Resourses computers) from other computers on the private network.
How will my business benefit from a Firewall?
Businesses around the world are embracing the Internet and it's technologies to increase productivity and profitability. Firewalls help companies balance the openness of the Internet with the need to protect the privacy and integrity of sensitive business information.
How Firewalls work - Under the Hood... if you will?
Historically, three different technologies have been used to implement firewalls:
Packet Filters - Packet filters, usually implemented on routers, filter traffic based on packet content, such as IP addresses. They examine a packet at the network layer and are application independent, which allows them to deliver good performance and scalability. They are the least secure type of firewall, however. The reason is that they are not application aware-that is, they cannot understand the context of a given communication, making them easier for hackers to break.
Application-Layer Gateways - Application gateways improve on security by examining all application layers, bringing context information into the decision process. However, they do this by breaking the client/server model. Every client/server communication requires two connections: one from the client to the firewall (which acts as a "proxy" for the desired server) and one from the firewall to the (actual) server. In addition, every application requires a new proxy, making scalability and support for new applications a problem.
Stateful Inspection - Provides the highest level of security possible and overcomes the limitations of the previous two approaches by providing full application-layer awareness without breaking the client/server model. Stateful Inspection extracts the state-related information required for security decisions from all application layers and maintains this information in dynamic state tables for evaluating subsequent connection attempts. This provides a solution that is highly secure and offers maximum performance, scalability, and extensibility.
Integrity-IS Firewall Solutions are based upon Stateful Inspection, which has become the de facto standard for firewalls.
I bought a Firewall/Router from the local store - Is my network protected?
Many small businesses and homes have purchased these routers that just plug in to your Cable/DSL Modem and Whoila! your now protected - Don't you feel secure.
The truth is these devices provide users with a false sense of security. Since consumers are always looking for a bargain the manufactures aim to oblige and built these $100 special firewalls to accomodate them.
These firewalls have NOT been tested to meet any Certified Firewall Criteria (for example Intrusion Detection & Prevention). If they had they would cost more. Like any else... If it sounds to good to be true it probably is.
Certified Firewalls have a sticker or emblem stating they meet or exceed a given certification criteria (i.e. ISCA Labs Modular Firewall Certification Criteria 4.0 - Like IS0 9001 or UL Listed.)
Certified Firewalls have many security options that can be catered to your needs:
Intrusion Detection & Prevention
Anti-Spam and Spyware
Content Filtering & Blocking
Branch VPN - To connect computers at 2 or more locations.
Internet Usage Reporting
Internet Access Control - Allows only certain users to access the Internet
E-mail Filtering |