It's more likely that you'll need a router between your firewall and the Internet. In this location, a router can screen out an Internet stream's obvious "junk traffic" before it reaches the firewall. You can use the router to apply broad firewall rules across the enterprise. For example, if you don't allow any SSH traffic through the firewall, you can drop all inbound port 22 traffic at the router, letting the firewall focus on arbitrating...
Some firewalls do act as proxy servers, but only if they are specifically designed as Layer 7, or application-layer firewalls. Consider the case where an internal user wishes to access an external Web site. The proxy firewall transparently inserts itself into the conversation, completing the three-way handshake with the end user, determining whether the traffic is allowed, and then completing a separate three-way handshake with the destination system.
Dig deeper on Network Firewalls, Routers and Switches
Related Q&A from Mike Chapple, Enterprise Compliance
Social media compliance is not typically considered a big issue for companies, but expert Mike Chapple explains why it should be.continue reading
Metadata tagging is not just for security. Expert Mike Chapple explains how tagging tools can be used to achieve PCI DSS compliance.continue reading
Before using the HIPAA-compliant cloud services from Google, there are some things companies need to know, according to expert Mike Chapple.continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.