Firewall Operation Packet Filtering Firewall l Stateful Inspection

  • Slides: 32
Download presentation

Firewall Operation Packet Filtering Firewall l Stateful Inspection Firewall l Application Proxy Firewall l

Firewall Operation Packet Filtering Firewall l Stateful Inspection Firewall l Application Proxy Firewall l

Packet Filtering Firewall

Packet Filtering Firewall

Stateful Inspection Firewall

Stateful Inspection Firewall

Application Proxy Firewall

Application Proxy Firewall

Hybrid Firewall l Packet Filtering + Application Proxy Third Generation Firewall Technology ตวอยาง l

Hybrid Firewall l Packet Filtering + Application Proxy Third Generation Firewall Technology ตวอยาง l Raptor Firewall by Symantec l Firewall 1 by Checkpoint l Sidewinder Firewall by Secure Computing l Lucent Brick by Lucent

FIREWALL ARCHITECTURE

FIREWALL ARCHITECTURE

Firewall Architectures l l l Screening Router Simple Firewall Multi-Legged firewall Firewall Sandwich Layered

Firewall Architectures l l l Screening Router Simple Firewall Multi-Legged firewall Firewall Sandwich Layered Security Architecture

Screening Router

Screening Router

Simple Firewall

Simple Firewall

Multi. Legged Firewall

Multi. Legged Firewall

Firewall Sandwich

Firewall Sandwich

Layered Firewall

Layered Firewall

High Availability Network

High Availability Network

Network Security Policy Rule Source Destination 6 Internal Network Any 7 Any Service (Port)

Network Security Policy Rule Source Destination 6 Internal Network Any 7 Any Service (Port) Action Description HTTP (80) , HTTPS Allow อนญาตใหผใ ชภายในเครอขา (443) , FTP (20 -21) ยใชบรการดงก , Telnet (23), SSH (22) , ลาวจากอนเทอร SMTP (25) , POP 3 (110) , เนตและ DMZ IMAP 4 (143) Any Deny ถาไมตรงกบกฎ ทกำหนดขาง บนใหละทงแพ กเกตนน

โจทย : การทำงานของ Firewall แตละชนด การโจมต Syn Flood Port Scan UDP Flood Land Attack

โจทย : การทำงานของ Firewall แตละชนด การโจมต Syn Flood Port Scan UDP Flood Land Attack Fragmentation Packet Session Hijack Web Hacking : Parameter Tempering Sniffer การคาดเดารหสผานเพอเขาระบบ … Packet Filtering Stateful Inspection Application Proxy

โจทย : Firewall Policy l Net. Sec Questions ขอ 15

โจทย : Firewall Policy l Net. Sec Questions ขอ 15

Firewall product l l l Juniper Cisco Catalyst Firewall Fortigate

Firewall product l l l Juniper Cisco Catalyst Firewall Fortigate

Firewall Features l l l Firewall Throughput : Mbps/Gbps VPN Throughput : Mbps Concurrent

Firewall Features l l l Firewall Throughput : Mbps/Gbps VPN Throughput : Mbps Concurrent Sessions : number IPsec VPN Peers : number Interfaces : number of Gigabit Ethernet ports, SFP fiber ports, and Fast Ethernet port Virtual Interfaces (VLANs) : number

Firewall Features l l l Scalability : VPN clustering and load balancing High Availability

Firewall Features l l l Scalability : VPN clustering and load balancing High Availability : Active/Active, Active/Standby Redundant Power : Supported, second power supply optional

Host ไฟรวอลลสำหรบ l l ไฟลวอลลสำหรบ ตวอยาง l l l l Host หรอ Personal Firewall

Host ไฟรวอลลสำหรบ l l ไฟลวอลลสำหรบ ตวอยาง l l l l Host หรอ Personal Firewall Windows 7 Firewall Zone Alarm Tiny Personal Firewall Norton Personal Firewall Sygate Personal Firewall Conseal PC Firewall VPN-1 Secure Client

Firewall Operation Packet Filtering Firewall l Stateful InspectionFirewall Operation Packet Filtering Firewall l Stateful Inspection
Firewall Operation Packet Filtering Firewall l Stateful InspectionFirewall Operation Packet Filtering Firewall l Stateful Inspection
Firewall POS SATPAM Firewall Apa itu firewall FirewallFirewall POS SATPAM Firewall Apa itu firewall Firewall
Outlines Introduction About packet filtering Stateless packet filteringOutlines Introduction About packet filtering Stateless packet filtering
Packet Filtering Firewalls Stateless Packet Filtering Assume WePacket Filtering Firewalls Stateless Packet Filtering Assume We
Deep Packet Inspection Deep Packet Inspection l DefinitionDeep Packet Inspection Deep Packet Inspection l Definition
PIX Firewall An example of a stateful packetPIX Firewall An example of a stateful packet
PIX Firewall An example of a stateful packetPIX Firewall An example of a stateful packet
PIX Firewall An example of a stateful packetPIX Firewall An example of a stateful packet
Python Stateful Parsing Peter Wad Sackett Stateful parsingPython Stateful Parsing Peter Wad Sackett Stateful parsing
FIREWALL Konsep Firewall Firewall adalah sebuah sistem atauFIREWALL Konsep Firewall Firewall adalah sebuah sistem atau
FIREWALL Conceito o que um Firewall Firewall umaFIREWALL Conceito o que um Firewall Firewall uma
FIREWALL Luidi V A Andrade Firewall Um firewallFIREWALL Luidi V A Andrade Firewall Um firewall
FIREWALL OUTLINES Firewall concept Firewall rule Types ofFIREWALL OUTLINES Firewall concept Firewall rule Types of
FIREWALL Purpose of Firewall A firewall protects networkFIREWALL Purpose of Firewall A firewall protects network
Lab 7 Filtering What is filtering Filtering isLab 7 Filtering What is filtering Filtering is
Morphological Filtering Spatial Filtering Morphological Filtering Morphological operatorsMorphological Filtering Spatial Filtering Morphological Filtering Morphological operators
Filtering What Is Filtering Filtering is spectral shapingFiltering What Is Filtering Filtering is spectral shaping
Chapter 19 Firewalls Packet Filtering Firewall Application GatewayChapter 19 Firewalls Packet Filtering Firewall Application Gateway
Outline22 Firewall Packet Filtering Application Gateway Proxy ServerOutline22 Firewall Packet Filtering Application Gateway Proxy Server
Adaptive Statistical Optimization Techniques for Firewall Packet FilteringAdaptive Statistical Optimization Techniques for Firewall Packet Filtering
Web Filtering and Deep Packet Inspection Artyom ChurilinWeb Filtering and Deep Packet Inspection Artyom Churilin
Packet Filtering CS480 b Dick Steflik Stateless PacketPacket Filtering CS480 b Dick Steflik Stateless Packet
Packet Filtering Prabhaker MatetiPacket Filters 1 Packet FiltersPacket Filtering Prabhaker MatetiPacket Filters 1 Packet Filters