Does a firewall protect against application attacks?

I have a stateful inspection firewall protecting our network. There are some "one-to-one" NAT settings, so we can...

Step 2 of 2:

You forgot to provide an Email Address.

This email address doesn’t appear to be valid.

This email address is already registered. Please login.

You have exceeded the maximum character limit.

Please provide a Corporate E-mail Address.
- I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.
Please check the box if you want to proceed.
- I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.
Please check the box if you want to proceed.

send and receive e-mail. Are we still vulnerable to application attacks (like the Windows OS vulnerabilities) if we have a firewall? Is there something else we can do to protect ourselves?

Firewalls do not stop everything. There are some Windows vulnerabilities that can be exploited by malicious Web sites. If a user visits that site, they are "had." Since your firewall probably allows users to surf the Internet and allows Internet responses to come back through, those attacks sail right through the firewall. Other exploits come in via e-mail, typically in attachments that users open without thinking about where they came from.

Some things you can do are:

Ensure that your firewall settings are correct. The default settings are typically not what you need.

Consider disabling Active-X and Java in your browsers. While this can stop some malicious sites from attacking, it can also limit your functionality. Perhaps you can add sites that you need to use Active-X or Java to your Trusted Sites Zone (in Internet Explorer you can put sites into different zones) and allow the use of those tools in the Trusted Sites Zone, but not the generic Internet Zone.

Limit what types of attachments are allowed to pass through your firewall.

Have antivirus software both on the desktops and the e-mail server, and ensure that they are updated regularly.

Monitor the Web sites of all your software vendors and ensure that your patches are kept up to date.

Continue to read SearchSecurity.com and other security sites to be among the first to learn of new exploits and how to prevent them.

For more info on this topic, visit these SearchSecurity.com resources:

Best Web Links: Infrastructure and network security

Dig Deeper on Application firewall security

SearchCloudSecurity

Preventing SQL injection attacks: A network admin's perspective

Information Security Learning Guides

What firewall controls should be placed on the VPN?

Quiz: Web server security

Please create a username to comment.

Cloud security quiz: Application security best practices

The importance of security, data encryption for cloud

Cloud workload protection platform security benefits, features

5G for enterprises requires other tech to reap full benefits

What IT pros can expect from 5G core network architecture

5 edge computing basics you need to know

The contradiction of post COVID-19 risk management

How to hire a data scientist with AI skills during pandemic

Use of virtual digital assistants for enterprise applications

Microsoft puts Universal Print in preview

How to fix a Windows 10 boot loop

Learn native Windows 10 virtual memory management methods

4 tips to pick the right cloud database service

Google, Microsoft add to their cloud migration toolkits

Public cloud vs. private cloud: Key benefits and differences

TikTok to open first European datacentre in Ireland during early 2022

If you hire foreign IT staff, ‘you’re fired’, Trump tells bosses in government-owned entities

TfL Go launched to support travel in London during pandemic

Dig Deeper on Application firewall security

Preventing SQL injection attacks: A network admin's perspective

Information Security Learning Guides

What firewall controls should be placed on the VPN?

Quiz: Web server security

Start the conversation

0 comments

Register

Login

Forgot your password?

Your password has been sent to:

Please create a username to comment.