FIREWALL PROJECT.pptx BY SAKSHI SOLAPURE
- 2. START
- 5. FIREWALL
- 6. CONTENT 1. INTRODUCTION 2. DEFINATION 3. FIREWALL PROTECTION 4. OVERALL FIREWALL SYSTEM DESIGN 5. IMPORTANT DESIGN FACTS 6. FIREWALL CATEGORIES 7. TYPES OF FIREWALL SOFTWARE 8. BENEFITS OF FIREWALL 9. ADVANTEGES OF FIREWALL 10. DISADVANTEGES OF FIREWALL 11. CONCLUSION
- 7. A firewall is a network security device, either hardware or software-based, which monitors all incoming and outgoing traffic and based on a defined set of security rules it accepts, rejects or drops that specific traffic. Accept : allow the traffic Reject : block the traffic but reply with an “unreachable error” Drop : block the traffic with no reply A firewall establishes a barrier between secured internal networks and outside untrusted network, such as the Internet. INTRODUCTION
- 9. A firewall is a device or a combination of systems that supervises the flow of traffic between distinctive parts of the network. A firewall is used to guard the network against nasty people and prohibit their actions at predefined boundary levels. A firewall is not only used to protect the system from exterior threats but the threat can be internal as well. Therefore we need protection at each level of the hierarchy of networking systems. A good firewall should be sufficient enough to deal with both internal and external threats and be able to deal with malicious software such as worms from acquiring access to the network. It also provisions your system to stop forwarding unlawful data to another system. For Example, a firewall always exists between a private network and the Internet which is a public network thus filters packets coming in and out. DEFINATION
- 10. FIREWALL PROTECTION In small networks, we can make each of our network device secured by ensuring that all the software patches are installed, unwanted services are disabled, and security software are properly installed within it. In this situation, as also shown in the figure, the firewall software is mounted on each machine & server and configured in such a manner that only listed traffic can come in and out of the device. But this works efficiently in small- scale networks only.
- 11. INTERNET FIREWALL HOME NETWORK FIREWALL PROTECT DIAGRAM
- 12. Firewall Protection in Small Scale Network In a large-scale network, it is almost next to impossible to manually configure the firewall protection on each node. The centralized security system is a solution to provide a secure network to big networks. With the help of an example, it is shown in the below figure that the firewall solution is imposed with the router itself, and it becomes simple to handle security policies. The policies of traffic come in and out into the device and can be handled solely by one device. This makes the overall security system cost-effective. FIREWALL SOFTWARE
- 13. Overall Firewall System Design Example An internal router is also implemented in this design to route the packets internally and perform filtering actions. The advantage of this design is that it having three layers of security, the packet filtering perimeter router, IDS, and the firewall. The disadvantage of this set-up is that no IDS occurs in the internal network thus can’t easily prevent internal attacks.
- 14. Important Designing Facts: A Packet-filtering firewall should be used at the boundary of the network to give enhanced security. Every server having exposure to a public network such as the Internet will be placed in DMZ. Servers having crucial data will be equipped with host-based firewall software within them. In addition to these on servers, all unwanted services should be disabled. If your network is having critical database servers such as HLR server, IN, and SGSN which is used in mobile operations, then multiple DMZ will be deployed. If external sources such as far-end organizations want to access your server placed in an internal network of security system then use VPN. For crucial internal sources, such as R&D or financial sources, IDS should be used to monitor and deal with internal attacks. By imposing levels of security separately, extra security can be provided to the internal network.
- 15. Firewall Categories Based on the filtering of traffic there are many categories of the firewall, some are explained below: 1) Packet Filtering Firewall It is a kind of router which is having the ability to filter the few of the substance of the data packets. When using packet-filtering, the rules are classified on the firewall. These rules find out from the packets which traffic is permitted and which are not. 2) Stateful Firewall It is also called as dynamic packet filtering, it inspects the status of active connections and uses that data to find out which of the packets should be permitted through the firewall and which are not. The firewall inspects the packet down to the application layer. By tracing the session data like IP address and port number of the data packet it can provide much strong security to the network. It also inspects both incoming and outgoing traffic thus hackers found it difficult to interfere in the network using this firewall.
- 16. 3) Proxy Firewall These are also known as application gateway firewalls. The stateful firewall is unable to protect the system from HTTP based attacks. Therefore proxy firewall is introduced in the market. It includes the features of stateful inspection plus having the capability of closely analyzing application layer protocols. Thus it can monitor traffic from HTTP and FTP and find out the possibility of attacks. Thus firewall behaves as a proxy means the client initiates a connection with the firewall and the firewall in return initiates a solo link with the server on the client’s side.
- 17. Types of Firewall Software The few of the most popular firewall software that the organizations use to protect their systems are mentioned below: 1) Comodo Firewall Virtual Internet browsing, to block unwanted pop-up ads, and customizing DNS servers are the common features of this Firewall. Virtual Kiosk is used to block some procedure and programs by absconding and penetrating the network. In this firewall, apart from following the long process for defining ports and other programs to allow and block, any program can be allowed and blocked by just browsing for the program and clicking on the desired output. Comodo killswitch is also an enhanced feature of this firewall which illustrates all ongoing processes and makes it very easy to block any unwanted program.
- 18. 2) AVS Firewall It is very simple to implement. It guards your system against nasty registry amendments, pop-up windows, and unwanted advertisements. We can also modify the URL’s for ads anytime and can block them also. It’s also having the feature of a Parent control, which is a part of permitting access to a precise group of websites only. It is used in Windows 8, 7, Vista, and XP. 3) Netdefender Here we can easily outline the source and destination IP address, port number, and protocol that are permitted and not permitted in the system. We can allow and block FTP for being deployed and restricted in any network. It also has a port scanner, which can visualize which can be used for traffic flow.
- 19. 4) PeerBlock Despite blocking individual class of programs defined in the computer it blocks the overall IP addresses class fall in a particular category. It deploys this feature by blocking both incoming and outgoing traffic by defining a set of IP addresses that are barred. Therefore the network or computer using that set of IPs can’t access the network and also the internal network can’t send the outgoing traffic to those blocked programs. 5) Windows Firewall The most frequent firewall used by Windows 7 users is this firewall. It provisions the access and restriction of traffic and communication between networks or a network or a device by analyzing IP address and port number. It by default permits all outbound traffic but allows only those inbound traffic which is defined.
- 20. 6) Juniper Firewall The juniper in itself a networking organization and design various types of routers and firewall filters also. In a live network like Mobile service providers uses Juniper made firewalls to protect their network services from different types of threats. They guard the network routers and extra incoming traffic and unreceptive attacks from external sources that can interrupt network services and handle which traffic to be forwarded from which of router interfaces. It implements one input and one output firewall filter to each of the incoming and outgoing physical interfaces. This filters out the unwanted data packets following the rules defined at both incoming and outgoing interfaces. According to default firewall configuration settings, which packets to be accepted and which to be discarded is decided.
- 21. Benefit of Firewall Monitors Network Traffic. All of the benefits of firewall security start with the ability to monitor network traffic. ... Stops Virus Attacks. Nothing can shut your digital operations down faster and harder than a virus attack. ... Prevents Hacking. ... Stops Spyware. ... Promotes Privacy.
- 22. Monitors Network Traffic. All of the benefits of firewall security start with the ability to monitor network traffic. ... Stops Virus Attacks. Nothing can shut your digital operations down faster and harder than a virus attack. ... Prevents Hacking. ... Stops Spyware. ... Promotes Privacy. Advanteges of Firewall
- 23. Disadvantges of Firewall Cost. The investment cost for the implementation of firewalls into the network systems purely depends upon their type. ... User Restriction. ... Performance. ... Malware Attacks. ... Complex Operations.
- 24. Conclusion From the above description about various aspects of the firewall, we will conclude that to overcome the external and internal network attacks the concept of the firewall has been introduced. The firewall can be hardware or software which by following a certain set of rules will guard our networking system from the virus and other types of malicious attacks. We have also explored here the different categories of the firewall, components of the firewall, designing and implementation of a firewall, and then some of the famous firewall software we used to deploy in the networking industry.