tailieunhanh - An Toàn Mạng: Tường lửa

A firewall is defined as a gateway or access server (hardware- or software-based) or several gateways or access servers that are designated as buffers between any connected public network and a private network. | An Toàn Mạng: Tường lửa (Firewall) Võ Viết Minh Nhật Khoa CNTT – Trường ĐHKH Nội dung trình bày Các khái niệm cơ bản Các kiểu firewall khác nhau Packet filtering and stateless filtering Stateful filtering Deep packet layer inspection Nâng cao khả năng cho firewall Cơ chế chuyển đổi địa chỉ Các dịch vụ proxy Lọc nội dung Phần mềm chống virus Các khái niệm cơ bản A firewall is defined as a gateway or access server (hardware- or software-based) or several gateways or access servers that are designated as buffers between any connected public network and a private network. A firewall is a device that separates a trusted network from an untrusted network. It may be a router, a PC running specialized software, or a combination of devices. Các khái niệm cơ bản Các kiểu firewall khác nhau A multitude of firewall is produced that are capable of monitoring traffic using different techniques. Some of firewalls can inspect data packets up to Layer 4 and others can inspect all layers (deep packet . | An Toàn Mạng: Tường lửa (Firewall) Võ Viết Minh Nhật Khoa CNTT – Trường ĐHKH Nội dung trình bày Các khái niệm cơ bản Các kiểu firewall khác nhau Packet filtering and stateless filtering Stateful filtering Deep packet layer inspection Nâng cao khả năng cho firewall Cơ chế chuyển đổi địa chỉ Các dịch vụ proxy Lọc nội dung Phần mềm chống virus Các khái niệm cơ bản A firewall is defined as a gateway or access server (hardware- or software-based) or several gateways or access servers that are designated as buffers between any connected public network and a private network. A firewall is a device that separates a trusted network from an untrusted network. It may be a router, a PC running specialized software, or a combination of devices. Các khái niệm cơ bản Các kiểu firewall khác nhau A multitude of firewall is produced that are capable of monitoring traffic using different techniques. Some of firewalls can inspect data packets up to Layer 4 and others can inspect all layers (deep packet firewalls). three types of inspection methodologies Packet filtering and stateless filtering Stateful filtering Deep packet layer inspection Packet filtering Packet filters are now easy to break, hence the introduction of proxy servers that limit attacks. A proxy server is a server that sits between a client application, such as a web browser, and a real server. It intercepts all requests to the real server to see if it can fulfill the requests itself. If not, it forwards the request to the real server. Proxy servers are application based, slow, and difficult to manage in large IP networks. Stateless firewall A stateless firewall permits only the receipt of information packets that are based on the source's address and port from networks that are trusted. It adds more flexibility and scalability to network configuration Packets are inspected up to Layer 3, therefore, stateless firewalls are able to inspect source and destination IP addresses and protocol source and destination ports. .