A Firewall imposes restrictions on incoming and outgoing packets to and from the private network. All the traffic, whether incoming or outgoing, must pass through the firewall, and only authorized traffic is allowed to pass through it.
to and from the private network. • All the traffic, whether incoming or outgoing, must pass through the firewall, and only authorized traffic is allowed to pass through it.
over to a site system. • This can be explained by the example that if some host can be made reachable from outside networks, whereas others can be effectively sealed off from unwanted access.
except for special cases such as mail servers or information servers. • Thus providing a filtering system which enables only those that meet the access policy.
to cut costs on their security mechanism. • Simply put, it becomes easier to set unique security credentials on the Firewall itself, and it works on all systems accessing the network.
less installation and maintenance costs, unlike other solutions. • Despite of the fact that Kerberos and other security mechanisms have their added benefits over Firewall, the letter one remains more popular due to its simplicity, specialization and less costs.
be taken care as innocuous information might contain clue that termed to be very helpful to hackers or attackers. • Since to overcome these factors and grab a much effective security value, a Firewall comes in action.
in leaking this information such as finger and Domain Name Service. • These Firewalls can also be used to block DNS information about site systems, thus the names and IP addresses of site systems would not be available to Internet hosts.
used as a filter towards all of the internet access to and from the system passes through it. • The firewall can log accesses and provide valuable statistics about network usage.
and evidence of probing for a number of reasons. • One of the primary importance is knowing whether the firewall is withstanding probes and attacks, and determining whether the controls on the firewall are adequate thus helping in maintaining risk factors.
to hosts by filtering inherently insecure services. • As a result, the subnet gets shield from all of the risks, as only selected protocols will be able to pass through the Firewall.
NFS from entering or leaving a subnet. • A Firewall could reject all source-routed packets and ICMP redirects and then inform administrators of the incidents.