lecture notes poi (1)

pdf

School

University of Victoria *

*We aren’t endorsed by this school

Course

519C

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by ChiefSummer12462

Network Security (Firewalls and IPS) University Of Victoria Stateful Firewalls

NS: FW & IPS Stateful FWs • Unlike simple packet filtering firewalls that make decisions based only on individual packets, stateful firewalls keep track of the state of network connections . • Maintains a state table that stores information about active connections , such as source and destination IP addresses, port numbers, and the current state of the connection (e.g., established, new, related). • Works at Layer 4 and Up 61

NS: FW & IPS Stateful FWs Features • Connection Tracking : The firewall continuously tracks the state and attributes of connections. For example, it can determine if an incoming packet is part of an established connection or if it's an unsolicited request. • Advanced Rule Sets: Allows for finer-grained control over traffic, including the ability to permit or deny traffic based on the direction of the connection (Zoning), and the state of the connection. 62

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

NS: FW & IPS FW Zones • A concept used in network security to define different areas of a network with specific security requirements and access controls. • Zones help organizations segment their networks and apply appropriate security policies over the connections between zones. • Examples: – Internet (Outside) Zone – Internal (Inside) Zone – DMZ (Demilitarized) Zone 63

NS: FW & IPS FW Zones Example 64

NS: FW & IPS Cisco Adaptive Security Appliance (ASA) • Works at Layer 4 and up to Layer 7 for some protocols. • Introduced the concept of security levels (zones). • Traffic from the higher security level (Trusted) zones to lower security level (Less-trusted) zones is permitted by default. • Traffic from a lower security level to a higher one is, by default, not permitted. However, if you need to allow this type of traffic, you can create access control rules that explicitly permit it. 66

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

NS: FW & IPS Network address translation (NAT) • Maps the source or destination IP addresses to different IPs. • This Mapping could be done in astatic or dynamic form. • Port address translation is a special form of dynamic NATing where the source or destination ports also is mapped to other ports. 67

NS: FW & IPS Stateful FWs Demo 68