Firewall Architecture Tutorial

Firewall implementation and design for an enterprise can be a daunting task. Choices made early in the design process can have far-reaching security implications for years to come. In this series of tips, we take a detailed look at the task of firewall implementation and help guide you through the design process.

We've divided the process into four stages:

• How to choose a firewall:
  Despite the development and evolution of next generation security technologies, the firewall remains a vital component of any network architecture. However, today's organizations have several types of firewalls to choose from. This tip outlines five basic questions to ask when identifying the type of firewall that best suits your organization's network security needs.
• Choosing the right firewall topology:
  When developing a perimeter protection strategy for an organization, one of the most common questions is "Where should I place firewalls for maximum effectiveness?" This tip provides an overview of the three most common firewall topologies, including diagrams of a bastion host, screened subnet and dual-firewall architectures.
• Placing systems in a firewall topology:
  Once you have decided which topology best suits your IT infrastructure, it's time to decide where to place individual firewall systems within the chosen topology. This tip reviews several factors to consider when deciding where to place systems in a firewall topology, such as bastion host, screened subnet and multi-homed firewalls.
• Auditing firewall activity:
  Firewall configurations change quickly and often, ...
  
  To continue reading for free, register below or login

  Requires Membership to View

  To gain access to this and all member only content, please provide the following information:

  Email Address:
  
  
  

  By joining SearchSecurity.com you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.
  
  TechTarget cares about your privacy. Read our Privacy Policy
  To read more you must become a member of SearchSecurity.com

  As an existing member of the TechTarget network please activate your SearchSecurity.com account 

  By joining SearchSecurity.com you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.
  
  TechTarget cares about your privacy. Read our Privacy Policy
  
  
  

  BROWSE BY TAG Network Security Tactics,   DMZ Setup and Configuration,   NAC and Endpoint Security Management,   Enterprise Network Security,   Network Security: Tools, Products, Software,   Network Firewalls, Routers and Switches,   VIEW ALL TAGS

  
  

  RELATED CONTENT Network Security Tactics What to do with network penetration test results How to use TrueCrypt for disk encryption Protecting enterprise networks from new mobile application downloads Maintaining security after a cloud computing implementation Preparing the network for a cloud computing implementation PuTTY configuration tips: How to connect to remote network systems A guide to internal and external network security auditing How to keep networks secure when deploying an 802.11n upgrade Screencast: Find rogue wireless access points with Vistumbler How to provide access to Web content (while ensuring network security) DMZ Setup and Configuration Endpoint protection best practices manual: Combating issues, problems How to set up a DMZ How to configure firewall ports for webmail system implementation When should a database application be placed in a DMZ? How will many firewalls serving as the default gateway affect the DMZ? Should a domain controller be placed within the DMZ? If one server in a DMZ network gets attacked from outside, will the other servers be corrupted? Should an ISP keep corrupted machines off of a network? A security checklist: How to build a solid DMZ Server considerations for internal network application setup Network Firewalls, Routers and Switches How to prepare for a secure network hardware upgrade Best Network Firewall Products What is the difference between static and dynamic network validation? Screencast: Smoothwall offers firewall defense in lean times New Cisco IOS bugs pose tempting targets, says Black Hat researcher How to implement virtual firewalls in a complex network infrastructure How to manage network bandwidth with distributed ISP bandwidth Firewall rule management best practices Should enterprises be running multiple firewalls? What are the disadvantages of proxy-based firewalls?

  RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary DMZ  (SearchSecurity.com)

  RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

  
  
  making it difficult to keep on top of routine firewall maintenance tasks. In this tip, learn ways to audit a firewall's capabilities to help keep network events in order.

Reading through each of these tips will put you well on the road to firewall implementation success. Good luck!

ABOUT THE AUTHOR:

Mike Chapple, CISSP is an IT Security Professional with the University of Notre Dame. He previously served as an information security researcher with the National Security Agency and the U.S. Air Force. Mike is a frequent contributor to SearchSecurity, a technical editor for Information Security magazine and the author of several information security titles including the CISSP Prep Guide and Information Security Illuminated.