Filtering in Firewall By Fantastic 5
Agenda What is Firewall? Types Of Firewall Pros and Cons Of Different Firewalls What Firewall can do? What Firewall can not do? Q & A
What is Firewall? Isolates organization’s internal network from larger Internet, allowing some packets to pass, blocking others.
Types Of Firewall Packet Filtering Firewall Operate at network layer Circuit Level Operates at transport layer Application level Firewall Operates at Application layer
Packet Filter Firewall Incoming TrafficAllowed Outgoing Traffic
Packet Filtering Firewall Stateless Filters Stateful Filters Content Filters Dynamic Packet Filtering
Stateless Packet Filters Simple filters Makes decision on a packet by packet basis Every packet check
Stateless Packet Filtering Pros Very fast, no need to remember anything about the traffic Cons More Complex criteria decreases performance No protection against malicious code in upper layer Difficult to get the filtering rules right
Stateful Packet Filtering Each connection established is stored in saved in a table. The first packet of the connection is checked against pre-defined rules.
Stateful Packet Filtering Pros Scalable More Secure, as maintain connection state Cons Connection maintain even for connectionless protocols Takes more CPU time.
Content Filtering Check the content of the packet It looks for the packet contents at the network layer
Circuit level Firewall Incoming TrafficAllowed Outgoing Traffic
Application Level Firewall Incoming TrafficAllowed Outgoing Traffic
Circuit Level Firewall Pros Improved security When network packets are readdressed, information about protected network is hidden Cons No application Level Security
Dynamic Packet Filtering Monitor state of active connection Record session information such as IP, Port no. Determines whether packets are allowed or not, by comparing state of that connection. Much secure than static packet filter e.g. only replies to users data requests are let back in.
What Firewalls can do? What Firewalls can do? Deny unauthorized access Control access to authorized services Monitor traffic Raise alarm if suspicious activity occurs Enforce Policy
What Firewalls can not do? What Firewalls can not do? Protect against threats inside your network Protect against services allowed through the firewall Set themselves up – misconfiguration Only Firewalls can not be used to make the secure network
Conclusion The Firewall alone can not make the network secure from the public network like internet
References Firewall(networking). 2 March Wikimedia Foundation Inc. 2 March Dynamic packet Filtering (DPF). September Netmaster Digital security, Inc. 11 March < Firewall Q&A Vicomsoft Ltd. 26 Febraury2007. Introduction to Firewalls. 3 Sep Addison Wesley Professional, Inc. 12 March Evolution of Firewall Industry. 28 Sep Cisco Systems, Inc. 22 March IP Packet Filtering. April IBM. 26 March NVIDIA Firewall NVIDIA Corporation. 26 March 2007.
Questions?
Thank U !