Firewall

November 28, 2022
A firewall is a hardware and software tool that provides network security by filtering incoming, outgoing, and intranet traffic between a local network and the Internet or a network and a computer. Filtering is performed according to user-specified rules.
The word firewall comes from the German word Brandmauer, which literally means “fire wall”, i.e. a barrier that protects surrounding buildings from the spread of fire in a fire. A firewall also protects the device from external threats by removing or reducing unwanted communications.

What tasks the firewall performs

  • Scans for threats on the network;
  • Blocks suspicious or denied connections to potentially vulnerable services;
  • Controls access to network services;
  • Protects against malware;
  • Blocks unauthorized access attempts;
  • Protects against spam and junk mail;
  • Maintains corporate security at a high level.

How does the firewall work?

Firewalls are used in corporate and personal networks. They are a necessary component of network security. Most operating systems have a basic built-in Firewall, but using third-party applications provides better protection (for example, they are used for antivirus applications).

Firewalls can include a security information and event management (SIEM) strategy. They can perform logging and auditing functions by identifying patterns and improving rules by updating them to protect against threats.

The most important function of the Firewall is to create a boundary between external and protected networks by checking all incoming and outgoing packets.

The packet information includes a data source, a destination, and content. Data may differ at each level of the network, as may rule sets. Firewall reads these packets and converts them relative to the rules, indicating to the protocol where to send them.

Types of firewalls

Firewall can be software or hardware.

  • Software servers are installed on each computer; they regulate network traffic using applications and port numbers.
  • Hardware Firewalls are equipment that is installed between the gateway and the network.

There are several types of Firewalls based on traffic filtering methods, structure, and functionality.

  • A packet filtered Firewall monitors the flow of data between networks. It allows or blocks data transmission based on various information, such as application protocols for data transmission, source address, and packet assignment.
  • The proxy Firewall protects the network by filtering messages at the application level. For a specific application, the proxy server serves as a gateway from one network to another.
  • Stateful Packet Inspection is a technology that makes it possible to set conditions for allowing or blocking network traffic based on state, port, and protocol.