Chapter 9

Question 1

firewall

Answer 1

inserted between premise network + internet to establish controlled link
- perimeter defence

Question 2

design goal of firewalle

Answer 2

1. all traffic must pass through firewall
2. only authorized traffic as defined by policy allowed to pass
3. firewall immune to penetration

Question 3

firewall access policy

Answer 3

list of types traffic authorized - address range , protocols , applications, content types

Question 4

Firewall filter characteristics

Answer 4

1. IP address + protocol values - packet filter - limit access to specific service
2. application protocol - application level gateway - relay + monitor exchange of info for specific application protocols
3. user identity - for inside users - use form of secure authentication
4. network activity - control access based on time of request, rate of request , activity patterns

Question 5

firewall capabilities

Answer 5

1. single choke point
2. location for monitoring security events
3. platform for several internet function that are not security related
4. provide platform for IPSec

Question 6

firewall limitations

Answer 6

1. cannot protect against inside attack
2. cannot protect against attack bypassing firewall
3. improperly secured WLAN can be accessed from outside
4. BYOD

Question 7

packet filtering firewall

Answer 7

1. apply rule to incoming + outgoing traffic
2. rules based on matches in IP/TCP header
3. info in network packet - source IP , destination IP, source + destination port address , IP protocol field, interface
4. default policies -discard (prohibit by default) , forward (permit by default)

Question 8

advantages of packet filtering firewall

Answer 8

1. simplicity
2. transparent to users
3. fast

Question 9

weaknesses of packet filtering

Answer 9

1. cannot prevent attacks that employ application specific vulnerabilities
2. limited logging functionality
3. does not support advanced user authentication
4. vulnerable to TCP/IP spoofing
5. improper configuration can lead to breaches

Question 10

stateful inspection firewall

Answer 10

1. create directory of outbound TCP connections
   2.