Firewall
Firewall
Firewall
Group 1
Saba komal 19011556-056
Afaq Ahmed 19011556-048
Maham Mazhar Ul Haq 19011556-068
FIREWALL:
• Firewall is a network security device which is used to manage and filter the incoming andoutgoing network Traffic.
• Firewall is handle or filter the traffic between private and public network.
• The main function of firewall is to manage the unwanted access over a network and also out the unfaith traffic from the network.
• Host based and Network based firewall.
Trusted Untrusted
Firewall exist since 1980's to filter the packet over the network. There are many types of firewall
• Packet filtering
• Proxy services
• Stateful inspection
• Next Generation Firewall
WORKING OF FIREWALL
• Network layer or packet filters inspect packets at a relatively low level of the TCP/IP protocol
stack, not allowing packets to pass through the firewall unless they match the established rule
set where the source and destination of the rule set is based upon Internet Protocol (IP)
addresses and ports.
• Firewalls that do network layer inspection perform better than similar devices that do
application layerinspection. The downside is that unwanted applications or malware can pass
over allowed ports, e.g outbound Internet traffic over web protocols HTTP and HTTPS, port 80
and 443 respectively
PACKET FILTERING
• Packet filtering is a firewall technique used to control network access by monitoring outgoing and incoming packets
and allowing them to pass or halt based on the source and destination Internet Protocol (IP) addresses, protocols and
ports
• It works on layer 4.
• Check IP header,TCP header.
• Work on Network and Transport Layer
• Can block IP address.
• Can block a services
PROXY SERVICES
• A proxy firewall is a network security system that protects network resources by filtering
messages at the application layer
• It works on layer 5.
STATEFUL INSPECTION
Inbound firewall rules protect the Outbound firewall rules protect against
network against incoming traffic, such as outgoing traffic, originating inside a
disallowed connections, malware, and network.
denial-of-service (DoS) attacks.
NEXT GENERATION FIREWALL
What is next generation firewall?
ASA firewall stand for Adaptive Security Appliance which is used permit inbound and
outbound traffic.
NEXT GENERATION FIREWALL
Types of NGFW:
Host Based Firewall
Network Based Firewall
H OST BA SED F IR EW A L L ( P R OT ECT
ONL Y H OS T) :
Network based Firewall (protect network):
HOW TO DO LAB:-
FOR NGFW
EXAMPLE:
SERVER CONFIG
ROUTER CONFIG
ASA CONFIG
ASA CONFIG
ASA CONFIG
SLIDE TITE
Thank you!