Notes of Network Security
By:-jpwebdevelopers
Firewall
● A firewall can be defined as a special type of network security device or a
software program that monitors and filters incoming and outgoing network traffic
based on a defined set of security rules. It acts as a barrier between internal private
networks and external sources (such as the public Internet).
● Acts as a barrier between a trusted internal network and untrusted external
networks, such as the internet.
● Monitors and controls incoming and outgoing network traffic based on
rs
predetermined security rules.
● Can be hardware-based, software-based, or a combination of both.
pe
● Common types include packet-filtering, stateful inspection, proxy, and
next-generation firewalls.
lo
ve
de
eb
w
Firewall: Hardware or Software
A firewall can be either a physical device or a program on your computer. It's available in both
jp
hardware and software forms, but having both is ideal for stronger protection.
Hardware firewalls are like physical barriers between your network and the outside world.
They're actual devices you plug into your network, such as a router.
Software firewalls, on the other hand, are like virtual guards that run on your computer. They
monitor the data going in and out of your device and decide what's safe.
Notes of Network Security
By:-jpwebdevelopers
Notes of Network Security
By:-jpwebdevelopers
While they work differently, both hardware and software firewalls serve the same purpose: to
keep your network safe from unwanted intruders and harmful data. Combining them offers better
overall protection for your system.
How does a firewall work?
A firewall is like a security guard for your computer or network. It watches all the traffic coming
rs
in and going out, checking it against a set of rules to decide if it's safe or not. If it sees something
suspicious or from an unreliable source, it blocks it from getting through. Only traffic that meets
the rules and comes from trusted sources is allowed in. Think of it as a gatekeeper that only lets
pe
the good stuff in and keeps the bad stuff out.
Incoming traffic is allowed only through trusted IP addresses, or sources.
lo
ve
de
eb
w
jp
Capabilities
● Packet filtering: Examines packets and allows or denies them based on defined rules.
● Stateful inspection: Tracks the state of active connections and filters traffic based on
context.
● Application-layer filtering: Analyzes data at the application layer to detect and block
specific types of traffic.
Notes of Network Security
By:-jpwebdevelopers
Notes of Network Security
By:-jpwebdevelopers
● VPN support: Facilitates secure remote access and site-to-site connectivity through
virtual private networks.
● Intrusion detection/prevention: Detects and blocks malicious activity and unauthorized
access attempts.
● Content filtering: Filters web content to prevent access to inappropriate or harmful sites.
● Network address translation (NAT): Hides internal IP addresses and conserves public
IP addresses.
● Logging and reporting: Records and analyzes firewall activity for security auditing and
incident response.
rs
pe
Limitations of Firewall
● Network Threat Prevention
lo
● Application and Identity-Based Control
● Hybrid Cloud Support
ve
● Scalable Performance
● Network Traffic Management and Control
de
● Access Validation
eb
w
jp
Notes of Network Security
By:-jpwebdevelopers
