NETWORK FIREWALL VISUALIZATION IN THE CLASSROOM *
|
|
- Godwin Nicholson
- 8 years ago
- Views:
Transcription
1 NETWORK FIREWALL VISUALIZATION IN THE CLASSROOM * 1st Lieutenant Justin Warner, 1st Lieutenant David Musielewicz, 1st Lieutenant G. Parks Masters, 1st Lieutenant Taylor Verett, 1st Lieutenant Robert Winchester and Dr. Steven Fulton United States Air Force Academy ABSTRACT The implementation of network firewalls can be a difficult concept for students to grasp initially. Our Network Firewall Visualization tool, a capstone project created by our students, uses visualization (the graphical display of a simulation) to convey and teach network security and firewall configuration to students of all levels. This tool is intended to teach and reinforce key concepts including the use and purpose of a perimeter firewall, the use of separated subnets, the purposes behind packet filtering, and the shortcomings of a simple packet filter firewall. The expectation was that through the use of this tool students will gain a better understanding of the importance and use of network firewalls and their role in network security. This paper outlines the rationale behind the creation of the tool, how the tool is used in a classroom environment and demonstrates the improved understanding of the role of firewalls by students after using the tool in a guided classroom environment. The findings of this paper suggest a better student comprehension on written assessments following structured usage of this tool. I. BACKGROUND For years, our institution has taught a Computer Security/Information Warfare class as part of its computer science curriculum. The focus of this class is to teach students how to secure systems through understanding weaknesses inherent in computer systems and the vulnerabilities associated with networked computers. This class is part of the school s information security curriculum which is recognized by the National Security Agency and the Department of Homeland Security through its designation as a Center of Academic Excellence (CAE) in Information Assurance. The CAE designation is awarded based on an academic institution s ability to demonstrate the integration of a number of security topics within its curriculum [1]. * This paper is authored by an employee(s) of the United States Government and is in the public domain. 88
2 CCSC: Rocky Mountain Conference The Computer Security/Information Warfare class is taught annually and made up of primarily senior Computer Science majors. While, this class recently became a core requirement for all computer science majors, it also attracts other majors including basic science and system engineering students. The course is a mix of both lecture and handson laboratory sessions. This combination allows students to satisfy the need for theoretical education while permitting reinforcement of theory with tools and techniques on a practical basis. Such reinforcement helps to keep students interested while allowing them to see a more practical side of the theory being presented. In the past, such hands-on reinforcement required complex lab configurations. In the case of networking topics, these environments may require isolated configurations in which students can create and configure networking environments [2], complex virtualization environments in which students create and modify virtual network environments [3] or animation of presentations using computer based flash environments [4]. Furthermore, we have discovered that differing student skill levels make hands-on labs difficult as some students grasp theoretical computer science topics more easily than others and have more experience with hardware and operating systems. In an attempt to meet the educational needs of all students, our department has turned to visualization tools to present such topics instead of attempting to bring a room full of students skills to the same level prior to tackling a difficult subject in a complex lab environment. II. CLASSROOM VISUALIZATION TOOLS Hands-on labs are seen as an effective way to teach students real world vulnerability, attacks, and tools in information warfare [5]. Such hands-on labs in the information warfare arena come with their own problems including the previously mentioned range of student knowledge and the difficulty simplifying these topics without reducing the topic to a simple script kiddy tool which doesn t reinforce underlying theory [6]. One solution is to use visualization tools which permit the teaching of a topic through simulation in a self contained environment. Such visualization tools can be an effective means for reinforcing complex concepts and teaching challenging material. We ve found that single purpose tools can be used in several different ways such as teacher demonstration, student labs, and homework exercises as well across different student skill levels. Each use might bring about a different level of understanding for the student from general comprehension to deep learning (a change which carries beyond the end of the training effort) [7]. A visualization tool should, in an ideal situation, be enjoyable to use as well as easy to understand so that students can actively learn the concepts while applying the concept to the real world [8]. Connections between tool and concept must be subtle yet meaningful and easy to understand so central ideas can be taught while keeping the student s focus. Hands-on interaction with the visualization tool along with realistic scenarios permits students to interrelate the subject with a concrete experience. For the majority of students, this makes learning complicated concepts easier and more important [9]. 89
3 JCSC 26, 2 (December 2010) III. THE NETWORK FIREWALL VISUALIZATION TOOL Five senior students recently created the Network Firewall Visualization Tool under the mentorship of a faculty member during their capstone course. This capstone course is taught during two sequential terms in which students work on projects identified by either faculty members or industry representatives. The goal of the capstone course is to permit teams of students to perform real world system engineering functions including formal design review meetings, schedules with strict milestones and detailed system analysis with the customer being the organization or person who has requested the project. The need for the Network Firewall Visualization Tool was identified by CS department faculty members who teach network topics to various class levels. The goal of the tool is to give students the opportunity to experiment with creating firewall rules to identify and stop network attacks. Accomplishing this task using actual firewall equipment would be expensive and difficult to maintain and monitor in a lab environment. The Network Firewall Visualization Tool is a Java based program designed to run on individual laptops. At our institution, students are required to purchase laptops as freshmen and to bring them to their classrooms to perform tasks associated with the individual classes such as note taking and programming. The Network Firewall Visualization Tool represents three distinct networking environments: a network with no firewall, a network with a single firewall, and a network with two different firewall configurations. The tool is further separated into several major components: Network Selection Traffic Definition Simulation Control Simulation Report Simulation Rule Creation User Help With the exception of the network layout, each component can be dynamically modified at any time during the scenario and the simulation will automatically update its course of action. For example, after defining traffic type and beginning the simulation, rules may be changed or new attacks may be added. The simulation will update automatically to reflect these changes. Furthermore, the current network setup including network selection, traffic, and rules can be saved to a file at any time for use in a later demonstration. A screenshot of the network selection dialog is shown in Figure 1: Network Selection Dialog Box. By default, our tool provides three standard network layouts common in traditional network security: no firewall, perimeter firewall, and a two firewall setup with a DMZ. As seen in Figure 1, the user has the ability to select which layout they would like to use or to load prebuilt scenarios from a file. This allows faculty members to create scenarios which can be loaded shared with the class. Additionally, students who have problems understanding a given scenario can save that scenario and 90
4 CCSC: Rocky Mountain Conference share it with the instructor to allow the instructor to provide an analysis and feedback of the student s specific situation. After selecting a network or loading a scenario, the user enters the primary simulation screen as seen in Figure 2 Main Simulation Window. The user may select options on the left to define the traffic present in a given scenario. Options allow enabling all of the represented services such as chat Figure 1: Network Selection Dialog Box traffic, VOIP traffic, or DNS queries. When traffic is generated, it is visually reflected in the tool. Some common attacks were included to test overarching concepts such as trojans (which exploit systems by removing information) or viruses (which propagate traffic which is hard to stop with packet filtering). As in real life scenarios, some of the attacks can not be stopped by a firewall, while others may be more easily controlled in such firewall scenarios. The user can control the simulation using the buttons and slide bars in the upper right hand corner of the main window. These controls allow users to start, stop, pause or navigate through the scenario using buttons similar to the common DVD player (See Figure 2). During simulation usage, students can measure their success with the Figure 2: Main Simulation Window firewall or debug a rule set using the log window on the right side of the main screen. This log screen will display blocked packets by source, destination, port and protocol. The counters at the bottom right indicate the number of malicious packets allowed through the firewall and the number of legitimate packets that were blocked. Ideally, a rule set would minimize both of these numbers. The goal of this tracking is to allow students to grasp the concept of the balance between security and usability while demonstrating that it is possible to secure a system to the point that it denies both legitimate and malicious traffic. Figure 3: Firewall Simulation with Active Traffic illustrates the active usage of the system. Network packets are listed in the legend on the left as symbols (an envelope for packet, disk platter for database traffic, and so on). As traffic flows along the network, the symbol associated with a given packet moves from the Internet cloud to a given computer, or between computers depending on the type of traffic. For example, mail traffic may flow into the system from the Internet, or from a workstation to the mail server. As active attacks take place, small color coded bugs travel across the network 91
5 JCSC 26, 2 (December 2010) to different machines as shown in Figure 4: Tool Icon Breakdown. The color coded symbols identify the type of attack being perpetrated against the network (i.e. red bugs symbolize an operating system exploit, etc.). Successful infection of a machine is identified through the use of the international no symbol. Furthermore, once a machine is infected, that infection can spread to other workstations or servers, just as in a real life situation. By following traffic down the network, it is possible for the user to identify where the traffic flows and which systems are vulnerable to attack. As packets continue through the system, firewall logs are kept similar logs kept in active firewall systems. These logs are scrollable through the Firewall Log window. Figure 3: Firewall Simulation with Active Traffic Figure 4: Tool Icon Breakdown Figure 5: Firewall Rule Dialog 92 Users configure the tool by creating rules. To do so, the user opens up the firewall rules dialog for a given firewall as seen in Figure 5: Firewall Rule Dialog. Within this dialog, there are two boxes on the right which contain activated rules and inactive rules. New rules are created by first clicking on the clear button and inputting all of the required information (Name, Source IP, Source Port, Destination IP, Destination Port and Protocol). Once created, a user can move individual rules to the inactive side for debugging without having to delete and recreate the rule for later analysis. Rules are applied in the order in which they are placed in the active box. To simplify the configuration of the rules, users can use the drop-down boxes to select which service they desire for the source or destination and to use the autocomplete feature for the IP Address and Port information. The user can then save the rule by selecting the save rule button. If a rule needs to be modified or viewed, the user can click on the desired rule and the information will be updated in the correct fields. Finally, the user can make the firewall stateful by checking that option to prevent ACK Scans from passing through the firewall by reviewing the data within the packets to see if they are harmful to the network. For help with all of these functions and concepts, the user can refer to the help documentation as illustrated in Figure 6: Help Dialog. The help pages are laid out to assist the user through each step of creating a scenario. Should the user want to skip to a specific area of the Help function, they can use the Table of Contents provided on the left hand
6 CCSC: Rocky Mountain Conference side of the window. This help function was designed to mimic standard Microsoft Windows help functions. IV. TOOL USAGE Our experience using visualization tools in the classroom suggests that students benefit from a formal guided path through thefigure 6: Help Dialog program. We have accomplished this by using exercises which not only guide the student through the use of the tools but also ask specific questions that force the student to draw conclusions based not only on what the tool shows them but their interaction with it. For example, in one exercise, a student is asked to create a rule with the following format: Rule Name: DNS Rule Source IP: DNS, Source Port: 53 Destination IP: Any, Destination port * Protocol: Any. Once the rule has been created, the student will begin the scenario by clicking the play button. As the traffic begins traversing through the simulation, students are then asked questions such as: What traffic now flows through the firewall? Would you claim your rule is now sufficient to allow traffic to flow for a typical network? Why or why not? Do any of the active attacks now work against machines behind the firewall? Without such formal guidance on the tool usage, we suspect the students will focus on the game-like aspect of the tool instead of focusing on understanding the rationale behind an attack being presented. Such specific questioning of students also provides the opportunity to assess student understanding of a given scenario. At the end of the lab session, students submit answers to the formal questions for assessment by instructors. Such assessments allow instructors to understand exactly how well students are grasping a given topics. By focusing on multiple attack types such as SYN, web attack, and ACK, the student is forced to ascertain why a given rule would stop one type of attack while permitting others. An example of this would be the SYN attack. In a SYN or TCP SYN Flood attack, a series of valid requests for a service is generated yet no connection to that service is created [10]. This would be something that is not typically solved using a firewall solution but instead by ensuring that the computer does not permit substantial hanging service requests. The simulation actually permits these SYN attacks to go through the firewall regardless of what students do to restrict this. By treating these attacks as they would be in the wild, students are forced to understand the details of the 93
7 JCSC 26, 2 (December 2010) attack and recognize why it successfully bypassed the rule set to reach machines behind the firewall. The additional flexibility of saving and reloading scenarios allows instructors to create a given rule set and share it with the students. Our experience has been that this feature allows students to explore more complex rule sets than would normally be created during the class itself. V. CLASSROOM USAGE The firewall visualization tool was used in two different offerings of our Information Warfare class. Prior to the introduction of this tool, the topic of firewalls was strictly a lecture lesson in which students were asked to identify the results of rules associated with a given topic. There was no firewall lab exercise associated with the material. In preparation for using the firewall tool, students participated in a 20 minute lecture-based overview of the role of firewalls in computer/network security followed by a demonstration of the visualization tool. Students were given the rest of the period to work with the guided exercise described previously. The instructor s role in this scenario was to ensure that students were completing the exercise and that they fully understood the scenario. Initially, students followed a number of guided scenarios in which they were asked to configure the tool for a given situation. For instance, they were asked to create a Perimeter Firewall which has DNS, and VOIP traffic and is attacked by both Viruses and Trojans. They are asked questions such as: Can you create a series of firewall rules in which malicious traffic never enters your network? or What rules did you create to do so? Additionally, students were asked to load an instructor created scenario and identify weaknesses in the firewall configuration. The exercises were followed up by a series of questions to assess the understanding of the firewall topics by the students. Following the exercise, a written survey was given to the students in an attempt to ascertain the value of the tool for the students. When asked about the usefulness of the tool following the exercise, 82% of the students responded that the tool was very useful in clarifying topics provided in the lecture compared with 14% who felt that this tool did not have additional benefit to the lecture alone. When asked about the complexity of the tool, 95% of the students felt that the tool was simple to use. 83 percent of the students found the tool to be helpful in clarifying complex topics. While the use of a firewall is discussed in a single lesson, several prior lessons presented topics about related network vulnerabilities such as viruses, Distributed Denial of Services, and SYN Flood attacks. The guided lab exercise exploited this tool to reenforce these topics, too. Such high level positive student response suggests that the tool helped to bring together these various concepts in a single lesson. 94
8 CCSC: Rocky Mountain Conference VI. CONCLUSIONS The overall results following the use of the tool in the classroom setting was positive. Students found the tool informative and interesting to use. Written assessments relating to the use of firewalls also demonstrated positive learning efforts with an average of 84% on questions relating to the purpose and use of firewalls on the course assessment. The structured usage of the tool coupled with the guided scenarios helped students to understand both how to use the tool as well as the strengths and weaknesses of firewalls. Open-ended questions in the scenario required students not only to understand how to create firewall configurations but to understand the role of firewalls in securing a network. The high number of positive responses to the tool suggests that the students accepted the tool as an integrated course learning experience. The written survey allowed the students to provide some general comments regarding the tool. 45% of the comments on the tool were positive and no negative comments offered. What was interesting was that the remaining 55% of the comments offered suggestions on ways that the tool could be modified to bring about additional learning beyond the current design such as adding definitions for attacks, allowing increased congestion of a given attack would have helped or requesting a final statics page. The number of unsolicited student comments focusing on new features suggests that students see additional value in the tool beyond its initial design and saw value in the use of the tool in other network related classes. VII. FUTURE PLANS The tool was designed with a requirement of expandability. Faculty interest in the tool includes the possibility of supporting IPSec implementation between services, drag and drop network design, expanded types of traffic or attacks, and the ability to put the tool in an advanced mode for a more in depth teaching of how firewall design works. Current plans include the use of this tool in a beginning computer science survey course to help simplify the use of firewalls as a security tool. VIII. REFERENCES [1] Schweitzer, D., Humphries, J., and Baird, L., Meeting the criteria for a Center of Academic Excellence (CAE) in information assurance education. Journal of Computing Sciences in Colleges, (1): 160. [2] Romney, G. and Stevenson, B. An isolated, multi-platform network sandbox for teaching IT security system engineers, in Proceedings of the 5th conference on Information technology education: 2004: [3] Begnum, K., Sechrest, J., and Jenkins, S., Getting more from your virtual machine. Journal of Computing Sciences in Colleges, (2): 73. [4] Bergstrom, L., Grahn, K., Karlstrom, K., Pulkkis, G., and Astrom, P., Teaching network security in a virtual learning environment. Journal of Information Technology Education, :
9 JCSC 26, 2 (December 2010) [5] Yurcik, W. and Doss, D. Different approaches in the teaching of information systems security, in Proceedings of the Information Systems Education Conference: [6] Schweitzer, D. and Fulton, S., A Hybrid Approach to Teaching Information Warfare in 5th International Conference on Information Warfare and Security Dayton, OH. pp. [7] Marton, F. and Saljo, R., On qualitative differences in learning: 1--Outcome and process. British Journal of Educational Psychology, [8] Schweitzer, D. and Brown, W., Interactive visualization for the active learning classroom. ACM SIGCSE Bulletin, (1): 212. [9] Schweitzer, D., Collins, M., and Baird, L. AVisual Approach to Teaching Formal Access Models in Security, in 11th Colloquium for Information Systems Security Education. [10] Stallings, W. and Brown, L., Computer security: principles and practice. 2008, Pearson Prentice Hall. 96
HoneyBOT User Guide A Windows based honeypot solution
HoneyBOT User Guide A Windows based honeypot solution Visit our website at http://www.atomicsoftwaresolutions.com/ Table of Contents What is a Honeypot?...2 How HoneyBOT Works...2 Secure the HoneyBOT Computer...3
Firewalls Overview and Best Practices. White Paper
Firewalls Overview and Best Practices White Paper Copyright Decipher Information Systems, 2005. All rights reserved. The information in this publication is furnished for information use only, does not
1. Introduction. 2. DoS/DDoS. MilsVPN DoS/DDoS and ISP. 2.1 What is DoS/DDoS? 2.2 What is SYN Flooding?
Page 1 of 5 1. Introduction The present document explains about common attack scenarios to computer networks and describes with some examples the following features of the MilsGates: Protection against
Don t skip these expert tips for making your firewall airtight, bulletproof and fail-safe. 10 Tips to Make Sure Your Firewall is Really Secure
Don t skip these expert tips for making your firewall airtight, bulletproof and fail-safe. 10 Tips to Make Sure Your Firewall is Really Secure Security studies back up this fact: It takes less than 20
DESIGNING WEB LABS FOR TEACHING SECURITY CONCEPTS ABSTRACT
DESIGNING WEB LABS FOR TEACHING SECURITY CONCEPTS ABSTRACT Security education is critical in today s cyber threat environment. Many schools have investigated different approaches to teaching fundamental
How To Protect Your Network From Attack From Outside From Inside And Outside
IT 4823 Information Security Administration Firewalls and Intrusion Prevention October 7 Notice: This session is being recorded. Lecture slides prepared by Dr Lawrie Brown for Computer Security: Principles
CS 665: Computer System Security. Network Security. Usage environment. Sources of vulnerabilities. Information Assurance Module
CS 665: Computer System Security Network Security Bojan Cukic Lane Department of Computer Science and Electrical Engineering West Virginia University 1 Usage environment Anonymity Automation, minimal human
Network Instruments white paper
Network Instruments white paper USING A NETWORK ANALYZER AS A SECURITY TOOL Network Analyzers are designed to watch the network, identify issues and alert administrators of problem scenarios. These features
Network Security: A Case Study
Network Security: A Case Study Susan J. Lincke Computer Science Department University of Wisconsin-Parkside Kenosha, WI lincke@uwp.edu Abstract This paper reviews 3 case studies related to network security.
10 Configuring Packet Filtering and Routing Rules
Blind Folio 10:1 10 Configuring Packet Filtering and Routing Rules CERTIFICATION OBJECTIVES 10.01 Understanding Packet Filtering and Routing 10.02 Creating and Managing Packet Filtering 10.03 Configuring
CMPT 471 Networking II
CMPT 471 Networking II Firewalls Janice Regan, 2006-2013 1 Security When is a computer secure When the data and software on the computer are available on demand only to those people who should have access
Chapter 9 Firewalls and Intrusion Prevention Systems
Chapter 9 Firewalls and Intrusion Prevention Systems connectivity is essential However it creates a threat Effective means of protecting LANs Inserted between the premises network and the to establish
Norton Personal Firewall for Macintosh
Norton Personal Firewall for Macintosh Evaluation Guide Firewall Protection for Client Computers Corporate firewalls, while providing an excellent level of security, are not always enough protection for
ILTA HANDS ON Securing Windows 7
Securing Windows 7 8/23/2011 Table of Contents About this lab... 3 About the Laboratory Environment... 4 Lab 1: Restricting Users... 5 Exercise 1. Verify the default rights of users... 5 Exercise 2. Adding
Managing Remote Access
VMWARE TECHNICAL NOTE VMware ACE Managing Remote Access This technical note explains how to use VMware ACE to manage remote access through VPN to a corporate network. This document contains the following
Seminar Computer Security
Seminar Computer Security DoS/DDoS attacks and botnets Hannes Korte Overview Introduction What is a Denial of Service attack? The distributed version The attacker's motivation Basics Bots and botnets Example
Firewall Defaults and Some Basic Rules
Firewall Defaults and Some Basic Rules ProSecure UTM Quick Start Guide This quick start guide provides the firewall defaults and explains how to configure some basic firewall rules for the ProSecure Unified
Architecture. The DMZ is a portion of a network that separates a purely internal network from an external network.
Architecture The policy discussed suggests that the network be partitioned into several parts with guards between the various parts to prevent information from leaking from one part to another. One part
Lab 8.4.2 Configuring Access Policies and DMZ Settings
Lab 8.4.2 Configuring Access Policies and DMZ Settings Objectives Log in to a multi-function device and view security settings. Set up Internet access policies based on IP address and application. Set
Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Question Number (ID) : 1 (wmpmsp_mngnwi-121) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. Several users complain that they cannot
VMware vcloud Air Networking Guide
vcloud Air This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document,
Background: This Lab reinforces the concepts of firewalls by requiring the student to complete the configuration of a host-based firewall.
Firewall Laboratory Module 11 Firewalls Background: This Lab reinforces the concepts of firewalls by requiring the student to complete the configuration of a host-based firewall. Requirements/assumptions:
CS 356 Lecture 19 and 20 Firewalls and Intrusion Prevention. Spring 2013
CS 356 Lecture 19 and 20 Firewalls and Intrusion Prevention Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access
Firewall Defaults, Public Server Rule, and Secondary WAN IP Address
Firewall Defaults, Public Server Rule, and Secondary WAN IP Address This quick start guide provides the firewall defaults and explains how to configure some basic firewall rules for the ProSafe Wireless-N
Understand Troubleshooting Methodology
Understand Troubleshooting Methodology Lesson Overview In this lesson, you will learn about: Troubleshooting procedures Event Viewer Logging Resource Monitor Anticipatory Set If the workstation service
Setting Up Scan to SMB on TaskALFA series MFP s.
Setting Up Scan to SMB on TaskALFA series MFP s. There are three steps necessary to set up a new Scan to SMB function button on the TaskALFA series color MFP. 1. A folder must be created on the PC and
SETTING UP AND USING A CYBER SECURITY LAB FOR EDUCATION PURPOSES *
SETTING UP AND USING A CYBER SECURITY LAB FOR EDUCATION PURPOSES * Alexandru G. Bardas and Xinming Ou Computing and Information Sciences Kansas State University Manhattan, KS 66506 bardasag@ksu.edu, xou@ksu.edu
Configuring PA Firewalls for a Layer 3 Deployment
Configuring PA Firewalls for a Layer 3 Deployment Configuring PAN Firewalls for a Layer 3 Deployment Configuration Guide January 2009 Introduction The following document provides detailed step-by-step
Chapter 4 Firewall Protection and Content Filtering
Chapter 4 Firewall Protection and Content Filtering This chapter describes how to use the content filtering features of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN to protect your network.
1. Firewall Configuration
1. Firewall Configuration A firewall is a method of implementing common as well as user defined security policies in an effort to keep intruders out. Firewalls work by analyzing and filtering out IP packets
Chapter 9 Monitoring System Performance
Chapter 9 Monitoring System Performance This chapter describes the full set of system monitoring features of your ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. You can be alerted to important
Virtual private network. Network security protocols VPN VPN. Instead of a dedicated data link Packets securely sent over a shared network Internet VPN
Virtual private network Network security protocols COMP347 2006 Len Hamey Instead of a dedicated data link Packets securely sent over a shared network Internet VPN Public internet Security protocol encrypts
Lab 8.4.2 Configuring Access Policies and DMZ Settings
Lab 8.4.2 Configuring Access Policies and DMZ Settings Objectives Log in to a multi-function device and view security settings. Set up Internet access policies based on IP address and application. Set
About Firewall Protection
1. This guide describes how to configure basic firewall rules in the UTM to protect your network. The firewall then can provide secure, encrypted communications between your local network and a remote
SyncLockStatus Evaluator s Guide
SyncLockStatus Evaluator s Guide 2011 Table of Contents Introduction... 2 System Requirements... 2 Required Microsoft Components... 2 Contact Information... 3 SyncLockStatus Architecture... 3 SyncLockStatus
Intro to Firewalls. Summary
Topic 3: Lesson 2 Intro to Firewalls Summary Basic questions What is a firewall? What can a firewall do? What is packet filtering? What is proxying? What is stateful packet filtering? Compare network layer
Enhance student s learning with an aid of simulation software to understand Computer Networking Undergraduate courses.
Enhance student s learning with an aid of simulation software to understand Computer Networking Undergraduate courses. Veeramani Shanmugam s.veeramani@curtin.edu.my Lenin Gopal lenin@curtin.edu.my Zeya
vcloud Air - Virtual Private Cloud OnDemand Networking Guide
vcloud Air - Virtual Private Cloud OnDemand Networking Guide vcloud Air This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
During your session you will have access to the following lab configuration. CLIENT1 (Windows XP Workstation) 192.168.0.2 /24
Introduction The Network Vulnerabilities module provides you with the instruction and Server hardware to develop your hands on skills in the defined topics. This module includes the following exercises:
User Guide. Version 3.2. Copyright 2002-2009 Snow Software AB. All rights reserved.
Version 3.2 User Guide Copyright 2002-2009 Snow Software AB. All rights reserved. This manual and computer program is protected by copyright law and international treaties. Unauthorized reproduction or
Usage of OPNET IT tool to Simulate and Test the Security of Cloud under varying Firewall conditions
Usage of OPNET IT tool to Simulate and Test the Security of Cloud under varying Firewall conditions GRADUATE PROJECT REPORT Submitted to the Faculty of The School of Engineering & Computing Sciences Texas
CS 356 Lecture 16 Denial of Service. Spring 2013
CS 356 Lecture 16 Denial of Service Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter
IPSEC for Windows Packet Filtering
IPSEC for Windows Packet Filtering David Taylor SR Information Security Specialist University of Pennsylvania ltr@isc.upenn.edu 215-898-1236 (Revision Date: 14 October 2005) *NOTE* This document is going
SSL-VPN 200 Getting Started Guide
Secure Remote Access Solutions APPLIANCES SonicWALL SSL-VPN Series SSL-VPN 200 Getting Started Guide SonicWALL SSL-VPN 200 Appliance Getting Started Guide Thank you for your purchase of the SonicWALL SSL-VPN
Firewall Firewall August, 2003
Firewall August, 2003 1 Firewall and Access Control This product also serves as an Internet firewall, not only does it provide a natural firewall function (Network Address Translation, NAT), but it also
Computer and Network Security Policy
Coffeyville Community College Computer and Network Security Policy Created By: Jeremy Robertson Network Administrator Created on: 6/15/2012 Computer and Network Security Page 1 Introduction: The Coffeyville
allow all such packets? While outgoing communications request information from a
FIREWALL RULES Firewalls operate by examining a data packet and performing a comparison with some predetermined logical rules. The logic is based on a set of guidelines programmed in by a firewall administrator,
Using Public IP Settings
Using Public IP Settings Interoute Virtual Data Centre Peter Farmer VDC Appliance Development Manager Interoute 01 Using Public IP Settings The Interoute Virtual Data Centre (VDC) Public IP Settings allow
OfficeScan 10 Enterprise Client Firewall Updated: March 9, 2010
OfficeScan 10 Enterprise Client Firewall Updated: March 9, 2010 What is Trend Micro OfficeScan? Trend Micro OfficeScan Corporate Edition protects campus networks from viruses, Trojans, worms, Web-based
Security perimeter white paper. Configuring a security perimeter around JEP(S) with IIS SMTP
Security perimeter white paper Configuring a security perimeter around JEP(S) with IIS SMTP Document control Document name: JEP(S) Security perimeter Author: Proxmea, Proxmea Last update: March 23, 2008
Setting up Microsoft Office 365
Setup Guide Revision F Using McAfee SaaS Email Protection to Secure Exchange Online in Microsoft Office 365 Setting up Microsoft Office 365 Use this guide to configure Microsoft Office 365 and Microsoft
Computer Security: Principles and Practice
Computer Security: Principles and Practice Chapter 9 Firewalls and Intrusion Prevention Systems First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Firewalls and Intrusion
GFI Product Manual. Administration and Configuration Manual
GFI Product Manual Administration and Configuration Manual http://www.gfi.com info@gfi.com The information and content in this document is provided for informational purposes only and is provided "as is"
Firewalls. CEN 448 Security and Internet Protocols Chapter 20 Firewalls
CEN 448 Security and Internet Protocols Chapter 20 Firewalls Dr. Mostafa Hassan Dahshan Computer Engineering Department College of Computer and Information Sciences King Saud University mdahshan@ccis.ksu.edu.sa
Maintaining, Updating, and Protecting Windows 7
Lesson 7 Maintaining, Updating, and Protecting Windows 7 Learning Objectives Students will learn to: Understand Disk Defragmenter Understand Disk Cleanup Understand Task Scheduler Understand Action Center
Core Protection Suite
Core Protection Suite Admin Guide Spam Soap, Inc. 3193 Red Hill Avenue Costa Mesa, CA 92626 United States p.866.spam.out f.949.203.6425 e. info@spamsoap.com www.spamsoap.com Contents EMAIL PROTECTION OVERVIEW...3
TANDBERG MANAGEMENT SUITE 10.0
TANDBERG MANAGEMENT SUITE 10.0 Installation Manual Getting Started D12786 Rev.16 This document is not to be reproduced in whole or in part without permission in writing from: Contents INTRODUCTION 3 REQUIREMENTS
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs Why Network Security? Keep the bad guys out. (1) Closed networks
Getting Started with Vision 6
Getting Started with Vision 6 Version 6.9 Notice Copyright 1981-2009 Netop Business Solutions A/S. All Rights Reserved. Portions used under license from third parties. Please send any comments to: Netop
Smart Sync. Computer Classroom Management Software. What is SMART Sync? Table of Contents
Smart Sync Computer Classroom Management Software What is SMART Sync? SMART Sync software helps instructors manage the computers in their classroom. SMART Sync keeps a student engaged and focused, and
Detecting rogue systems
Product Guide Revision A McAfee Rogue System Detection 4.7.1 For use with epolicy Orchestrator 4.6.3-5.0.0 Software Detecting rogue systems Unprotected systems, referred to as rogue systems, are often
How to Remotely View Security Cameras Using the Internet
How to Remotely View Security Cameras Using the Internet Introduction: The ability to remotely view security cameras is one of the most useful features of your EZWatch Pro system. It provides the ability
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. Chapter 5 Firewall Planning and Design
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. Chapter 5 Firewall Planning and Design Learning Objectives Identify common misconceptions about firewalls Explain why a firewall
Manual Password Depot Server 8
Manual Password Depot Server 8 Table of Contents Introduction 4 Installation and running 6 Installation as Windows service or as Windows application... 6 Control Panel... 6 Control Panel 8 Control Panel...
SE 4C03 Winter 2005 Firewall Design Principles. By: Kirk Crane
SE 4C03 Winter 2005 Firewall Design Principles By: Kirk Crane Firewall Design Principles By: Kirk Crane 9810533 Introduction Every network has a security policy that will specify what traffic is allowed
Firewall implementation and testing
Firewall implementation and testing Patrik Ragnarsson, Niclas Gustafsson E-mail: ragpa737@student.liu.se, nicgu594@student.liu.se Supervisor: David Byers, davby@ida.liu.se Project Report for Information
Chapter 4 Firewall Protection and Content Filtering
Chapter 4 Firewall Protection and Content Filtering The ProSafe VPN Firewall 50 provides you with Web content filtering options such as Block Sites and Keyword Blocking. Parents and network administrators
Computer Security CS 426 Lecture 36. CS426 Fall 2010/Lecture 36 1
Computer Security CS 426 Lecture 36 Perimeter Defense and Firewalls CS426 Fall 2010/Lecture 36 1 Announcements There will be a quiz on Wed There will be a guest lecture on Friday, by Prof. Chris Clifton
Comprehensive Anti-Spam Service
Comprehensive Anti-Spam Service Chapter 1: Document Scope This document describes how to implement and manage the Comprehensive Anti-Spam Service. This document contains the following sections: Comprehensive
CYAN SECURE WEB APPLIANCE. User interface manual
CYAN SECURE WEB APPLIANCE User interface manual Jun. 13, 2008 Applies to: CYAN Secure Web 1.4 and above Contents 1 Log in...3 2 Status...3 2.1 Status / System...3 2.2 Status / Network...4 Status / Network
How To Prevent Hacker Attacks With Network Behavior Analysis
E-Guide Signature vs. anomaly-based behavior analysis News of successful network attacks has become so commonplace that they are almost no longer news. Hackers have broken into commercial sites to steal
Barracuda Link Balancer Administrator s Guide
Barracuda Link Balancer Administrator s Guide Version 1.0 Barracuda Networks Inc. 3175 S. Winchester Blvd. Campbell, CA 95008 http://www.barracuda.com Copyright Notice Copyright 2008, Barracuda Networks
Installing GFI MailSecurity
Installing GFI MailSecurity Introduction This chapter explains how to install and configure GFI MailSecurity. You can install GFI MailSecurity directly on your mail server or you can choose to install
FIREWALL POLICY November 2006 TNS POL - 008
FIREWALL POLICY November 2006 TNS POL - 008 Introduction Network Security Services (NSS), a department of Technology and Network Services, operates a firewall to enhance security between the Internet and
Plesk 11 Manual. Fasthosts Customer Support
Fasthosts Customer Support Plesk 11 Manual This guide covers everything you need to know in order to get started with the Parallels Plesk 11 control panel. Contents Introduction... 3 Before you begin...
Implementing Secure Converged Wide Area Networks (ISCW)
Implementing Secure Converged Wide Area Networks (ISCW) 1 Mitigating Threats and Attacks with Access Lists Lesson 7 Module 5 Cisco Device Hardening 2 Module Introduction The open nature of the Internet
Security Guidelines for MapInfo Discovery 1.1
Security Guidelines for MapInfo Discovery 1.1 This paper provides guidelines and detailed instructions for improving the security of your Mapinfo Discovery deployment. In this document: Overview.........................................
Denial Of Service. Types of attacks
Denial Of Service The goal of a denial of service attack is to deny legitimate users access to a particular resource. An incident is considered an attack if a malicious user intentionally disrupts service
N-CAP Users Guide Everything You Need to Know About Using the Internet! How Firewalls Work
N-CAP Users Guide Everything You Need to Know About Using the Internet! How Firewalls Work How Firewalls Work By: Jeff Tyson If you have been using the internet for any length of time, and especially if
McAfee.com Personal Firewall
McAfee.com Personal Firewall 1 Table of Contents Table of Contents...2 Installing Personal Firewall...3 Configuring Personal Firewall and Completing the Installation...3 Configuring Personal Firewall...
Lehrstuhl für Informatik 4 Kommunikation und verteilte Systeme. Firewall
Chapter 2: Security Techniques Background Chapter 3: Security on Network and Transport Layer Chapter 4: Security on the Application Layer Chapter 5: Security Concepts for Networks Firewalls Intrusion Detection
CIT 480: Securing Computer Systems. Firewalls
CIT 480: Securing Computer Systems Firewalls Topics 1. What is a firewall? 2. Types of Firewalls 1. Packet filters (stateless) 2. Stateful firewalls 3. Proxy servers 4. Application layer firewalls 3. Configuring
"Charting the Course... ... to Your Success!" MOC 50331 D Windows 7 Enterprise Desktop Support Technician Course Summary
Description Course Summary This course provides students with the knowledge and skills needed to isolate, document and resolve problems on a Windows 7 desktop or laptop computer. It will also help test
FIREWALL AND NAT Lecture 7a
FIREWALL AND NAT Lecture 7a COMPSCI 726 Network Defence and Countermeasures Muhammad Rizwan Asghar August 3, 2015 Source of most of slides: University of Twente FIREWALL An integrated collection of security
Intrusion Detection and Prevention: Network and IDS Configuration and Monitoring using Snort
License Intrusion Detection and Prevention: Network and IDS Configuration and Monitoring using Snort This work by Z. Cliffe Schreuders at Leeds Metropolitan University is licensed under a Creative Commons
EC-Council Certified Security Analyst (ECSA)
EC-Council Certified Security Analyst (ECSA) v8 Eğitim Tipi ve Süresi: 5 Days VILT 5 Day VILT EC-Council Certified Security Analyst (ECSA) v8 Learn penetration testing methodologies while preparing for
Get Started Guide - PC Tools Internet Security
Get Started Guide - PC Tools Internet Security Table of Contents PC Tools Internet Security... 1 Getting Started with PC Tools Internet Security... 1 Installing... 1 Getting Started... 2 iii PC Tools
Deployment Guide for Microsoft Lync 2010
Deployment Guide for Microsoft Lync 2010 Securing and Accelerating Microsoft Lync with Palo Alto Networks Next-Generation Firewall and Citrix NetScaler Joint Solution Table of Contents 1. Overview...3
WIRELESS TRAINING SOLUTIONS. by vlogic, Inc. L a b 0.3 Remote Access Labs
WIRELESS TRAINING SOLUTIONS by vlogic, Inc L a b 0.3 Remote Access Labs WIRELESS TRAINING SOLUTIONS Hands-on Workshop and Lab Guide Table of Contents Connecting to the Wireless Training Solutions Network
Firewalls. Ahmad Almulhem March 10, 2012
Firewalls Ahmad Almulhem March 10, 2012 1 Outline Firewalls The Need for Firewalls Firewall Characteristics Types of Firewalls Firewall Basing Firewall Configurations Firewall Policies and Anomalies 2
Networking for Caribbean Development
Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n
SonicWALL GMS Custom Reports
SonicWALL GMS Custom Reports Document Scope This document describes how to configure and use the SonicWALL GMS 6.0 Custom Reports feature. This document contains the following sections: Feature Overview
WildFire Reporting. WildFire Administrator s Guide 55. Copyright 2007-2015 Palo Alto Networks
WildFire Reporting When malware is discovered on your network, it is important to take quick action to prevent spread of the malware to other systems. To ensure immediate alerts to malware discovered on
Setting up Microsoft Office 365
Integration Guide Revision G McAfee SaaS Email Protection Securing Exchange Online in Microsoft Office 365 Setting up Microsoft Office 365 Use this guide to configure Microsoft Office 365 and Microsoft
Internet Filtering Appliance. User s Guide VERSION 1.2
Internet Filtering Appliance User s Guide VERSION 1.2 User s Guide VERSION 1.2 InternetSafety.com, Inc 3979 South Main Street Suite 230 Acworth, GA 30101 Phone 678 384 5300 Fax 678 384 5299 1 Table of
Backup & Disaster Recovery Appliance User Guide
Built on the Intel Hybrid Cloud Platform Backup & Disaster Recovery Appliance User Guide Order Number: G68664-001 Rev 1.0 June 22, 2012 Contents Registering the BDR Appliance... 4 Step 1: Register the
Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding
Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding This chapter describes the configuration for the SSL VPN Tunnel Client and for Port Forwarding. When a remote user accesses the SSL VPN
AlienVault. Unified Security Management (USM) 5.x Policy Management Fundamentals
AlienVault Unified Security Management (USM) 5.x Policy Management Fundamentals USM 5.x Policy Management Fundamentals Copyright 2015 AlienVault, Inc. All rights reserved. The AlienVault Logo, AlienVault,
Setting up Sharp MX-Color Imagers for Inbound Fax Routing to Email or Network Folder
Setting up Sharp MX-Color Imagers for Inbound Fax Routing to Email or Network Folder MX-2300, MX-2600, MX-2700, MX-3100, MX-3501, MX-4501, MX-5500, MX-6200, MX-6201, MX-7000, MX-7001, *MX-M850, *MX-M950,
Hands-on Network Traffic Analysis. 2015 Cyber Defense Boot Camp
Hands-on Network Traffic Analysis 2015 Cyber Defense Boot Camp What is this about? Prerequisite: network packet & packet analyzer: (header, data) Enveloped letters inside another envelope Exercises Basic