WGU C172 - Network and Security Foundations – Firewalls Already Rated A+

WGU C172 - Network and Security Foundations – Firewalls Already Rated A+ Firewall A part of a computer system or network designed to block unauthorized access while permitting outward communication. Stateful Inspection Firewall The inbound and outbound data packets are compared to determine if a connection should be allowed. Proxy Server The client gets access to the network via the ____________________________. This step is used to authenticate the user, establish the session, and set policies. Packet Filtering Firewall Packet Filtering Firewall Can also limit information moving from one segment to another. Explicit ports must be opened to allow incoming and outgoing traffic. Stateful Inspection Firewall A _____________________________ type of Firewall operates at OSI Layers 3 (Network), 4 (Transport), 5 (Session). Firewall ________________ rules are called Access Control Lists (ACLs). Application Level Firewall Level 7 and below. Access Control Lists (ACLs) The ________________________________ Firewall operates at OSI allow or disallow traffic based on tuples (groups of variables like Source IP, Dest IP, Port Number, time, etc) Application Level Firewall Packet Filtering Firewall Sometimes known as a proxy firewall. A limit is placed on the packets that can enter the network. Compares traffic against pre-established criteria. Application Level Firewall Requires decode of the packets. Looks at actual data inside packets. Stateful Inspection Firewall Application Level Firewall Packet Filtering Firewall EVERY packet is analyzed, categorized and a security decision is made. Blocks program-level traffic. Analyzes packet content. A _____________________________ type of Firewall operates at Layer 3 (the IP Layer) and Layer 4 ( the TCP and UDP port numbers) Application Level Firewall Called application layer gateway, stateful multilayer inspection, deep packet inspection or next-gen. Stateful Inspection Firewall Tracking the source and destination port numbers and sequence numbers as well as the source and destination IP addresses. Automatically creates rules to permit traffic based on communication type. Proxy Server Hides your IP address. Looks at actual data inside packets. Packet Filtering Firewalls and Stateful Inspection Firewalls Headers. Application Level Firewall The types of firewalls that look at Data You might be able to view Twitter but not post to Twitter because the _____________________________ knows exactly what you should be allowed to do. Stateless Firewall Does NOT keep track of traffic flows (no sessions). Needs 2 rules (one to reach destination port, another to allow traffic to come back). Traffic sent outside an active session will be stateless. Proxy Server You make a request to the firewall then the firewall makes its own request on your behalf to the internet. Firewall Which network device is usually placed in-line between a trusted network and an untrusted network? Examines the response that it gets back for malware/danger and sends it to you if its Proxy Server safe. Stateful Inspection Firewall Application Level Firewall Application Level Firewall Application Level Firewall Which type of firewall requires the most CPU? Which type of firewall is considered most secure? Personal firewalls, often software-based. Included in many OSs They remember what the State of Communication is to other devices. Inspection Firewall refers to what? Application Level Firewall Windows Firewall Another name for a Host-based Firewall The "Stateful" in a Stateful A very common Application Level Firewall is the ___________________. Layer 3 devices Most firewalls can be __________________, which provide routing functionality between the inside and outside of the network. Proxy Server the network. Proxy Server The client must connect to the _______________ to connect to resources outside Some firewalls are configured as a _____________________, which can make a request on your behalf to the internet. Layer 3 devices What is a good way to have a central device that sits between you and the internet that provide routing, NAT, and security? Application Level Firewall application. Is application aware and can be used to disallow/disallow subsets of an Stateless Firewall Simply looking at the traffic going by, looking at a set of Access Controls, and either allowing or disallowing that traffic. Stateless Firewall Robert is communicating to a server and he is communicating through a Firewall. He needs two rules (or Access Controls), one for inbound traffic and one for outbound. What type of firewall is this? Stateful Inspection Firewall When traffic passes through the firewall, it makes a note of an active session and designates the IP addresses and the port numbers for both the source and the destination. Stateful Inspection Firewall Inbound traffic is checked to see if it is in a session table that the f irewall writes to. It determines that if it is an active flow and if the traffic is currently allowed. What type of firewall is this? Stateful Inspection Firewall If this type of firewall determined the traffic was not an active flow and not allowed in the session table it will drop the traffic. What type of firewall is this? Stateful Inspection Firewall ____________________. The most common type of firewall you will find is a