Decision making process - Security Devices and Appliances per OSI Model

Question 1

Describe the Decision making process: Packet-filter firewall (2)

Answer 1

Routing based; Standard/Extended ACL based on 5-Tuple

Question 2

Describe the Decision making process: Traditional Firewall (3)

Answer 2

Routing based; Security zone/level consideration; security policy based 5-Tuple

Question 3

Describe the Decision making process: NGFW/Zone-based firewall (3.5)

Answer 3

Routing based; Security zones/levels included in decision; Security police based on 6-Tuple and/or user-created

Question 4

Describe the Decision making process: ALG Application-level gateway ((application layer
gateway/ application gateway/application
proxy/Application-level proxy) (2)

Answer 4

Application signature or other application specific values; HTTP/HTTPS

Question 5

Describe the Decision making process: IDS/IPS (2)

Answer 5

Signature or behavioural based (SB); signature or anomaly based (SA)