1 What is Firewall? A system designed to prevent unauthorized access to or from a private network.
2 What is Firewall? (cont d) Firewall is a set of related programs, located at a network gateway server. Firewalls can be implemented in both hardware and software, or a combination of both. Firewall is a kind of wall that separates the secured networks and unsecured networks.
3 History of Firewall Firewall technology emerged in the late 1980s. First generation: Packet Filters In 1988, from Digital Equipment Corporation (DEC) developed filter systems known as packet filter firewalls.
4 History of Firewall (cont d) Second generation: Stateful Filters During AT&T Bell Laboratories developed the second generation of firewalls, calling them circuit level firewalls.
5 History of Firewall (cont d) Third generation: Application Layer Firewall During Gene Spafford of Purdue University, Bill Cheswick at AT&T Laboratories and Marcus Ranum described a third generation firewall known as application layer firewall, also known as proxy based firewalls.
6 History of Firewall (cont d) Fourth generation: Dynamic Packet Filtering First development is started in 1991, but never released. In 1992, Bob Braden and Annette DeSchon at USC's Information Sciences Institute began independently researching dynamic packet filter firewalls for a system that they called "Visas."
7 History of Firewall (cont d) Fifth generation: Kernel Proxy Architecture In 1996, Scott Wiegel, Chief Scientist at Global Internet Software Group, Inc started to develop Kernel Proxy Architecture. Cisco Centri Firewall is developed based on this architecture and released in 1997.
8 History of Firewall (cont d) Time line of Firewall Architectures
9 What types of attacks can occur? Intrusion: Unauthorizing access to a system has many ways. Operating system can be damaged, telnet hijacking and cracked or passwords can be guessed.
10 What types of attacks can occur? (cont d) Information Theft and Tampering: Data theft and tampering do not always require that the system be compromised. Many bugs with FTP servers that allow attacker to download password files or upload Trojan horses.
11 What types of attacks can occur? Denial of Service: Denial service attacks have many types and they are very difficult to defend against. For example, Mail bombs, an attacker repeatedly sends large mail files in the attempt at filling the servers disk file system so preventing legitimate mail from being received.
12 Purpose of Firewall It implements a desired security policy and controls the accessing into both directions through the firewall. It examines all packets to be routed based on a set of rules. It determines if the packet is allowed to pass or not.
13 Purpose of Firewall (cont d) Firewall is designed for restricting access to a network by selectively allowing or blocking inbound traffic to the network. It controls traffic by monitoring the various network ports and it is identified communicating between a program and another communications system or program often passing through a hardware port.
14 Does Firewall provide full security? Firewalls can not guarantee that the network is 100% secure. To achieve greater protection, it should use the other network security systems together.
15 Firewall Limitations Viruses (do not examine the content of package) Attacks (if all the traffic do not pass through it) Configuration (may not notify incorrect configuration) Masquerading (may not stop hackers) Monitoring (may not notify if somebody has hacked)
16 Firewall Related Problems Firewalls restrict access to certain services. Sometimes, firewalls create a traffic bottlenecks. By forcing all network traffic pass through the firewall the network will become congested. Firewall can create a single point of failure.
17 What is Personal Firewall? One of the easiest, least expensive ways to guard a home network from attacks. A personal firewall is a software package that acts as a door for your computer's incoming and outgoing connections. The firewall will only allow authorized communications to pass.
18 What is Personal Firewall? (cont d) A personal firewall differs from a conventional firewall in terms of scale. It implements per-application security. As a result, a personal firewall will usually protect only the computer on which it is installed.
19 Who needs a firewall? Anyone who is responsible for a private network that is connected to a public network needs firewall protection.
20 Establishing a Security Perimeter A network security policy focuses on controlling the network traffic and usage. It identifies a network's resources and threats. Defines the action plans for when the security policy is violated. Defines strategically defensible boundaries within your network. These strategic boundaries are called perimeter networks.
21 Security Perimeters (cont d) Trusted Networks:Trusted networks are the networks inside your network security perimeter. Untrusted Networks:Untrusted networks are the networks that are known to be outside your security perimeter. Unknown Networks: Unknown networks are networks that are neither trusted nor untrusted.
22 How does a Firewall Work? Two access methodologies are used by firewall. If firewall doesn t meet certain criteria, it may deny all traffic through. If a firewall meets certain criteria, it may allow all traffic through. Firewalls are related to the type of traffic, source or destination addresses, and ports.
23 How does a Firewall Work? (cont d) If the traffic is allowed through, firewalls may use complex rule that analyze the application data to determine. Firewall determines what traffic to let through, it depends on which network layer operates it.
26 Packet Filter Firewall Packet Filter Firewall is the original and most basic type of firewall. Each packet is examined and information contained in the header is compared to a pre-configured set of rules or filters. Based on the results of the comparison, packet is allowed or denied. Each packet is examined individually.
27 Packet Filter Firewall (cont d)
28 Packet Filter Firewall (cont d) Packet filters allow or deny traffic based on following rules: Source IP address Destination IP address Protocol type (TCP/UDP) Source port Destination port
29 Packet Filter Firewall (cont d) A packet filtering firewall is also called a network layer firewall because the filtering is primarily done at the network layer.
30 Packet Filter Firewall (cont d) Advantages: Packet filtering is fastest. The time it takes to process a packet is much quicker becuse packet filtering is done at the lower levels of the OSI model. Packet filtering can be implemented easily. They don t require any configuration for clients.
31 Packet Filter Firewall (cont d) Packet filtering firewalls are typically less expensive. Packet filtering firewalls are application independent. Decisions are based on information contained in the packet's header, not on information of the application.
32 Packet Filter Firewall (cont d) Disadvantages: Packet filters can leave data at risk to exposure. Packet filters offers little flexibility. Defining rules is a complex task. Packet filtering firewalls don t perform user authentication.
33 Stateful Packet Inspection
34 Stateful Packet Inspection (cont d) It examines the packet header information. It verifies that the packet is part of a legitimate connection and the protocols are behaving as expected.
35 Stateful Packet Inspection (cont d) Stateful Packet Inspection is done based on: Source IP address Destination IP address Protocol type (TCP/UDP) Source port Destination port Connection state
36 Stateful Packet Inspection (cont d) It operates faster because they require little processing overhead. Allow and deny decisions are made at the lower levels of the OSI model.
37 Stateful Packet Inspection (cont d) Advantages: It is more secure, because it looks deeper into the packet header information for the connection state between end points. Better protection against unwanted or unauthorized access. It has logging operation that can help identify and track the different types of traffic that pass though the firewall.
38 Stateful Packet Inspection (cont d) Disadvantages: Rules and filters can become complex, hard to manage and difficult to test Can not break the client/server model and therefore it allows the direct connection between the endpoints
39 Circuit Level Gateway A circuit-level gateway does not examine individual packets. It monitors TCP or UDP sessions. Once a session has been established, it leaves the port open to allow all other packets belonging to that session to pass. The port is closed when the session is terminated. Circuit Level Gateways operates at the transport layer of the OSI model.
40 Circuit Level Gateway (cont d) Circuit Level Gateway validates connections before allowing data to be exchanged. It allows or disallow packets, determines whether the connection between both ends is valid due to rules. Then opens a session. Then opens a session. It allows traffic only from the allowed source for a limited period of time.
41 Circuit Level Gateway (cont d) Validation of connection is done based on: destination IP address and/or port source IP address and/or port time of day protocol user password
42 Circuit Level Gateway (cont d) Every session of data exchange is validated and monitored and all traffic is disallowed unless a session is open.
43 Circuit Level Gateway (cont d) Advantages: IP spoofing can be rendered much more difficult. It is useful for hiding information about protected networks. It is relatively inexpensive.
44 Circuit Level Gateway (cont d) Disadvantages: It requires substantial modification of the programming which normally provides transport functions. Lack of application awareness. Circuit Level Gateway don t filter individual packets.
45 Application Gateway/Proxy An application gateway/proxy is the most complex. It usually implemented on a secure host system configured with two network interfaces. The application gateway/proxy acts like an intermediary between the two endpoints.
46 Application Gateway (cont d) Two connections are required: one from the source to the gateway/proxy and one from the gateway/proxy to the destination. Each endpoint can only communicate with the other by going through the gateway/proxy.
47 Application Gateway (cont d) When a client issues a request from the untrusted network, a connection is established with the application gateway/proxy. The proxy determines if the request is valid according to the rules. Then sends a new request on behalf of the client to the destination.
48 Application Gateway (cont d) The response is sent back in order to be determined if it is valid. Then sends it on to the client.
49 Application Gateway (cont d) It operates at the application level of the OSI model.
50 Application Gateway (cont d) Advantages: It provides the highest level of security. It provides full application layer awareness.they don t allow a direct connection between endpoints. They realize more control over traffic passing through the firewall.
51 Application Gateway (cont d) They have the best content filtering capabilities. They have large logging capabilities.
52 Application Gateway (cont d) Disadvantages: Setup may be very complex. Application Gateway is slower. Less flexible.
Firewall Design Principles Software Engineering 4C03 Dr. Krishnan Stephen Woodall, April 6 th, 2004 Firewall Design Principles Stephen Woodall Introduction A network security domain is a contiguous region
Lecture 23: Firewalls Introduce several types of firewalls Discuss their advantages and disadvantages Compare their performances Demonstrate their applications C. Ding -- COMP581 -- L23 What is a Digital
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. Chapter 5 Firewall Planning and Design Learning Objectives Identify common misconceptions about firewalls Explain why a firewall
SFWR ENG 4C03 Class Project Firewall Design Principals Arash Kamyab 9940313 March 04, 2004 Introduction: A computer firewall protects computer networks from unwanted intrusions which could compromise confidentiality
Firewalls Securing Networks Chapter 3 Part 1 of 4 CA M S Mehta, FCA 1 Firewalls Learning Objectives Task Statements 1.3 Recognise function of Telecommunications and Network security including firewalls,..
SE 4C03 Winter 2005 Firewall Design Principles By: Kirk Crane Firewall Design Principles By: Kirk Crane 9810533 Introduction Every network has a security policy that will specify what traffic is allowed
ΕΠΛ 674: Εργαστήριο 5 Firewalls Παύλος Αντωνίου Εαρινό Εξάμηνο 2011 Department of Computer Science Firewalls A firewall is hardware, software, or a combination of both that is used to prevent unauthorized
A firewall is a software- or hardware-based network security system that allows or denies network traffic according to a set of rules. Firewalls can be categorized by their location on the network: A network-based
Security threats and network As we have already discussed, many serious security threats come from the networks; Firewalls The firewalls implement hardware or software solutions based on the control of
ΕΠΛ 475: Εργαστήριο 9 Firewalls Τοίχοι πυρασφάλειας Department of Computer Science Firewalls A firewall is hardware, software, or a combination of both that is used to prevent unauthorized Internet users
Topic 3: Lesson 2 Intro to Firewalls Summary Basic questions What is a firewall? What can a firewall do? What is packet filtering? What is proxying? What is stateful packet filtering? Compare network layer
Firewalls and VPNs Principles of Information Security, 5th Edition 1 Learning Objectives Upon completion of this material, you should be able to: Understand firewall technology and the various approaches
http://technet.microsoft.com/en-us/library/cc757501(ws.10).aspx Appendix A: Configuring Firewalls for a VPN Server Running Windows Server 2003 Updated: October 7, 2005 Applies To: Windows Server 2003 with
Computer Security CS 426 Lecture 36 Perimeter Defense and Firewalls CS426 Fall 2010/Lecture 36 1 Announcements There will be a quiz on Wed There will be a guest lecture on Friday, by Prof. Chris Clifton
Chapter 2: Security Techniques Background Chapter 3: Security on Network and Transport Layer Chapter 4: Security on the Application Layer Chapter 5: Security Concepts for Networks Firewalls Intrusion Detection
CMPT 471 Networking II Firewalls Janice Regan, 2006-2013 1 Security When is a computer secure When the data and software on the computer are available on demand only to those people who should have access
Firewalls CSCI 454/554 Why Firewall? 1 Why Firewall (cont d) w now everyone want to be on the Internet w and to interconnect networks w has persistent security concerns n can t easily secure every system
Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n
Role of Firewall in Network Security By Syed S. Rizvi CS 872: Computer Network Security Fall 2005 Outline o Background o What is a Firewall? o What does a Firewall do? o Implementation of Firewall o Interaction
FIREWALLS & CBAC email@example.com Implementing a Firewall Personal software firewall a software that is installed on a single PC to protect only that PC All-in-one firewall can be a single device that
Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur Module No. # 01 Lecture No. # 40 Firewalls and Intrusion
Proxy Server, Network Address Translator, Firewall 1 Proxy Server 2 1 Introduction What is a proxy server? Acts on behalf of other clients, and presents requests from other clients to a server. Acts as
CS 665: Computer System Security Network Security Bojan Cukic Lane Department of Computer Science and Electrical Engineering West Virginia University 1 Usage environment Anonymity Automation, minimal human
Chapter 10 Firewall Firewalls are devices used to protect a local network from network based security threats while at the same time affording access to the wide area network and the internet. Basically,
CMSGu2014-02 Mauritian Computer Emergency Response Team CERT-MU SECURITY GUIDELINE 2011-02 Enhancing Cyber Security in Mauritius Guideline on Firewall National Computer Board Mauritius Version 1.0 June
Firewalls (IPTABLES) Objectives Understand the technical essentials of firewalls. Realize the limitations and capabilities of firewalls. To be familiar with iptables firewall. Introduction: In the context
Packet filtering and other firewall functions Martin Krammer firstname.lastname@example.org Martin Krammer Graz, May 25, 2007 1 Overview Firewalls Principles Architectures Security aspects Packet filtering Principles
July WHITE 2001 PAPER PERSONAL FIREWALLS: FIREWALL PROTECTION FOR PCS AND HOME NETWORKS Today's always on cable modem and Digital Subscriber Line (DSL) Internet access connections offer unprecedented bandwidth
Firewalls What is a Firewall? A choke point of control and monitoring Interconnects networks with differing trust Imposes restrictions on network services only authorized traffic is allowed Auditing and
Virtual private network Network security protocols COMP347 2006 Len Hamey Instead of a dedicated data link Packets securely sent over a shared network Internet VPN Public internet Security protocol encrypts
International Journal of Scientific and Research Publications, Volume 6, Issue 4, April 2016 504 High Security Firewall: Prevent Unauthorized Access Using Firewall Technologies S.C. Tharaka, R.L.C. Silva,
IMPLEMENTATION OF INTELLIGENT FIREWALL TO CHECK INTERNET HACKERS THREAT Roopa K. Panduranga Rao MV Dept of CS and Engg., Dept of IS and Engg., J.N.N College of Engineering, J.N.N College of Engineering,
Internet Security for Small to Medium Sized Businesses AN INTERNET SECURITY GUIDE FOR EVERY BUSINESS DOCUMENT VERSION 1.2 - OCTOBER 2002 COMPLIMENTS OF POWERWALLZ NETWORK SECURITY INC. 3 Introduction INTERNET
Computer Security: Principles and Practice Chapter 9 Firewalls and Intrusion Prevention Systems First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Firewalls and Intrusion
Cisco Secure PIX Firewall with Two Routers Configuration Example Document ID: 15244 Interactive: This document offers customized analysis of your Cisco device. Contents Introduction Prerequisites Requirements
Introduction of Intrusion Detection Systems Why IDS? Inspects all inbound and outbound network activity and identifies a network or system attack from someone attempting to compromise a system. Detection:
83-10-41 Types of Firewalls E. Eugene Schultz Payoff Firewalls are an excellent security mechanism to protect networks from intruders, and they can establish a relatively secure barrier between a system
Reverse Shells Enable Attackers To Operate From Your Network Richard Hammer August 2006 Reverse Shells? Why should you care about reverse shells? How do reverse shells work? How do reverse shells get installed
Firewalls Blekinge Institute of Technology, Sweden http://www.its.bth.se/staff/hjo/ +46-708-250375 Henric Johnson 1 Outline Firewall Design Principles Firewall Characteristics Types of Firewalls Firewall
Overview Security Type of attacks Firewalls Protocols Packet filter Computer Net Lab/Praktikum Datenverarbeitung 2 1 Security Security means, protect information (during and after processing) against impairment
SMALL BUSINESS NETWORK SECURITY GUIDE WHY A REAL FIREWALL PROVIDES THE BEST NETWORK PROTECTION AUGUST 2004 SMALL BUSINESS NETWORK SECURITY GUIDE: WHY A REAL FIREWALL PROVIDES THE BEST NETWORK PROTECTION
Architecture The policy discussed suggests that the network be partitioned into several parts with guards between the various parts to prevent information from leaking from one part to another. One part
CEN 448 Security and Internet Protocols Chapter 20 Firewalls Dr. Mostafa Hassan Dahshan Computer Engineering Department College of Computer and Information Sciences King Saud University email@example.com
Second-generation (GenII) honeypots Bojan Zdrnja CompSci 725, University of Auckland, Oct 2004. firstname.lastname@example.org Abstract Honeypots are security resources which trap malicious activities, so they
1 Firewalls for the Home & Small Business Gordon Giles DTEC 6810 Professor: Dr. Tijjani Mohammed 2 Abstract A firewall can be in the form of hardware, software or a combination of the two. It is basically
Firewalls, Tunnels, and Network Intrusion Detection 1 Part 1: Firewall as a Technique to create a virtual security wall separating your organization from the wild west of the public internet 2 1 Firewalls
FIREWALL RULES Firewalls operate by examining a data packet and performing a comparison with some predetermined logical rules. The logic is based on a set of guidelines programmed in by a firewall administrator,
Basics of Internet Security Premraj Jeyaprakash About Technowave, Inc. Technowave is a strategic and technical consulting group focused on bringing processes and technology into line with organizational
Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 6 Network Security Objectives List the different types of network security devices and explain how they can be used Define network
INTERNET SECURITY: THE ROLE OF FIREWALL SYSTEM Okumoku-Evroro Oniovosa Lecturer, Department of Computer Science Delta State University, Abraka, Nigeria Email: email@example.com ABSTRACT Internet security
s (March 4, 2015) Abdou Illia Spring 2015 Test your knowledge Which of the following is true about firewalls? a) A firewall is a hardware device b) A firewall is a software program c) s could be hardware
Cryptography and network security Firewalls slide 1 Firewalls Idea: separate local network from the Internet Trusted hosts and networks Firewall Intranet Router DMZ Demilitarized Zone: publicly accessible
PROTECTING INFORMATION SYSTEMS WITH FIREWALLS: REVISED GUIDELINES ON FIREWALL TECHNOLOGIES AND POLICIES Shirley Radack, Editor Computer Security Division Information Technology Laboratory National Institute
1. Obtain previous workpapers/audit reports. FIREWALL CHECKLIST Pre Audit Checklist 2. Obtain the Internet Policy, Standards, and Procedures relevant to the firewall review. 3. Obtain current network diagrams
CS 155 May 20, 2004 Firewalls Basic Firewall Concept Separate local area net from internet Firewall John Mitchell Credit: some text, illustrations from Simon Cooper Router All packets between LAN and internet
Network Defense Tools Prepared by Vanjara Ravikant Thakkarbhai Engineering College, Godhra-Tuwa +91-94291-77234 www.cebirds.in, www.facebook.com/cebirds firstname.lastname@example.org What is Firewall? A firewall
Page 1 of 6 Overview - Using ADAMS With a Firewall Internet security is becoming increasingly important as public and private entities connect their internal networks to the Internet. One of the most popular
Internet Firewall CSIS 3230 A combination of hardware and software that isolates an organization s internal network from the Internet at large Ch 8.8: Packet filtering, firewalls, intrusion detection Ch
Norton Personal Firewall for Macintosh Evaluation Guide Firewall Protection for Client Computers Corporate firewalls, while providing an excellent level of security, are not always enough protection for
Chapter 20. Firewalls [Page 621] 20.1 Firewall Design Principles Firewall Characteristics Types of Firewalls Firewall Configurations 20.2 Trusted Systems Data Access Control The Concept of Trusted Systems
Firewall Architectures of E-Commerce EE657 Midterm Project Presentation Professor Hwang Andy Yan Four State-of-the-art Firewall Architectures Description of 4 solutions IBM enetwork Compaq AXENT s Raptor
Module 8 Network Security Lesson 3 Firewalls Specific Instructional Objectives On completion of this lesson, the students will be able to answer: What a firewall is? What are the design goals of Firewalls
ReadyNAS Remote White Paper NETGEAR May 2010 Table of Contents Overview... 3 Architecture... 3 Security... 4 Remote Firewall... 5 Performance... 5 Overview ReadyNAS Remote is a software application that
Protecting and controlling Virtual LANs by Linux router-firewall Tihomir Katić Mile Šikić Krešimir Šikić Faculty of Electrical Engineering and Computing University of Zagreb Unska 3, HR 10000 Zagreb, Croatia