Purchase Solution

Computer network security: Securing network perimeters

Not what you're looking for?

Ask Custom Question

When you learned about the various technology products needed to secure an Internet perimeter, what differentiates one product from another in the marketplace? Why would a Cisco firewall be better than a SONICWall firewall, or is it? As you think about these questions, what might be some questions you'd ask a security product vendor when selecting firewalls, routers, and IDSs?

2-Please answer this post like discussion if you agree or disagree, and why? Please explain it. This post is the answer from somebody else about question #1.

When choosing firewall for network implementation, many things can differentiate one firewall from another. Firewalls can be different from each other according to what they offer. These are services that most firewalls offer today:
1.0 Full State Awareness, which has access to the "raw message," and can examine data from all packet layers. In addition, FireWall-1 analyzes state information from previous communications and other applications. The Inspection Module examines IP addresses, port numbers, and any other information required in order to determine whether packets comply with the enterprise security policy. It also stores and updates state and context information in dynamic connections tables.
2.0 Securing "Stateless" Protocols allows the firewall to understand the internal structures of the IP protocol family and applications built on top of them. For stateless protocols such as UDP aand RPC, the Inspection Module extracts data from a packet's application content and stores it in the state connections tables, providing context in cases where the application does not provide it. In addition, it can dynamically allow or disallow connections as necessary. These capabilities provide the highest level of security for complex protocols.
3.0 The Inspect language is based on using a checkpoint language for inspection of packets
4.0 Stateful Inspection: Under the hood to the firewall is able to ensure highest level of security, a firewall must be capable of accessing, analyzing and utilizing the following. The following functions are performed by stateful firewall: Communication Information - information from all seven layers in the packet
Communication-derived State - the state derived from previous communications. For example, the outgoing PORT command of an FTP session could be saved so that an incoming FTP data connection can be verified against it.
Application-derived State - the state information derived from other applications. For example, a previously authenticated user would be allowed access through the firewall for authorized services only.
Information Manipulation - the evaluation of flexible expressions based on all the above factors.
Check Point's Stateful Inspection is able to meet all the security requirements defined above.
Personally when designing network for a small or medium company I will choose Sonicwall over Cisco because of easy to configure that its firewalls offer, and the price that is much cheaper than Cisco's. In the opposite if I have to design a network for large company I will choose Cisco firewall because of the complexity of their system design, also because the name of Cisco which will give them more assurance than Sonicwall will do. The best thing to do is also mix both firewalls in the design since their interoperability is guaranteed.

Purchase this Solution
Solution Summary

Solution clearly explains the important computer network perimeter security related devices, their usage.

Solution Preview

Question 1:
===========

Answer)

Firewalls are the very important devices we use these days to secure Internet Perimeter.

Before going into the question we will have a look at the different classifications of firewalls:

There are several classifications of firewalls depending on:

* Whether the communication is being done between a single node and the network, or between two or more networks.
* Whether the communication is intercepted at the network layer, or at the application layer.
* Whether the communication state is being tracked at the firewall or not.

With regard to the scope of filtered communications there exist:

* Personal firewalls, a software application which normally filters traffic entering or leaving a single computer. This filtering may be based on the traffic itself or on the identity of the process which is attempting to listen for or send data.
* Network firewalls, normally running on a dedicated network device or computer positioned on the boundary of two or more networks or DMZs (demilitarized zones). Such a firewall filters all traffic entering or leaving the connected networks.

The latter definition corresponds to the conventional, traditional meaning ...

Purchase this Solution
Free BrainMass Quizzes
Excel Introductory Quiz

This quiz tests your knowledge of basics of MS-Excel.

C++ Operators

This quiz tests a student's knowledge about C++ operators.

Word 2010: Table of Contents

Ever wondered where a Table of Contents in a Word document comes from? Maybe you need a refresher on the topic? This quiz will remind you of the keywords and options used when working with a T.O.C. in Word 2010.

C# variables and classes

This quiz contains questions about C# classes and variables.

Word 2010: Tables

Have you never worked with Tables in Word 2010? Maybe it has been a while since you have used a Table in Word and you need to brush up on your skills. Several keywords and popular options are discussed as you go through this quiz.

View More Free Quizzes
Related BrainMass Solutions

  • logical and physical security

    The security code will act like a "password" or authentication code for computer or network. Therefore, logical security is concerned with securing data or other information stored on the computer or network via passwords and other security tools.

  • computer network

    Securing your network with Policies and Procedures: http://www.brighthub.com/computing/smb-security/articles/4776.aspx 4. Ten steps to securing Networks: http://howto.techworld.com/security/1862/ten-steps-to-secure-networking/ 5.

  • Wireless encryption standards

    The dilemma that often comes with securing a home network is deciding which wireless network security protocol to use.

  • Discussion of Computer Technology & Networked Organization

    Network Structure: http://www.pcmech.com/article/network-structure/ Network Structure Design: http://www.geeksnerds.co.uk/it-support/computer-network/ Securing your network with Policies and Procedures: http://www.brighthub.com/computing/smb-security

  • Providing Anti-virus software to employee home users

    For instance, once an employee's computer is connected to the company's network it can serve as a conduit for an outside attacker to gain access to the company network.

  • Secure Business Networks

    191857 Secure Business Networks Discuss the security of the network and suggest best practices for securing the business network. Security Characteristics The need of security for the network is to ensure, 1. Integrity 2. Authenticity 3.

  • Too much information security can be bad

    Any organizations' computer system and network security is of utmost importance when it comes to reliability and availability of systems for business continuity.

  • Source to complete my paper.

    The first step in securing VOIP communication is of course the use of firewalls.

  • Of the two types of Intrusion Alarm Systems why are there tw

    [POW99] Power, Richard, "1999 CSI/FBI Computer Crime and Security Survey," Computer Security Journal, Volume XV, Number 2, 1999, pp. 32. [SANS01] SANS Institute staff, "Intrusion Detection and Vulnerability Testing Tools: What Works?"

  • Securing a network

    Securing a network is examined.

View More Related Solutions