Firewalls

Question 1

What is a firewall?

Answer 1

A firewall is a security system that uses a set of predetermined rules to analyse and control the traffic that comes in and goes out of your network.

Question 2

Give a real world analogy of how a firewall works

Answer 2

Think of it like a bouncer at a bar. It keeps unsafe traffic out, while allowing anything legitimate to pass through without an issue.

Question 3

Firewalls can implement security rules. Give an example of one that a company might implement.

Answer 3

Out of the 500 computers inside this company, only one of them is permitted to receive public FTP traffic. Allow FTP connections only to that one computer and prevent them on all others.

Question 4

What are the 3 main types of firewall technique?

Answer 4

1. Proxy Server
2. Circuit-level gateway
3. Packet filter

Question 5

What does a proxy server do?

Answer 5

1. Checks all messages entering and leaving the network

2. Hides the true network addresses of the hosts

Question 6

What is a circuit-level gateway used for?

Answer 6

TCP connections

Question 7

How do circuit-level gateways work?

Answer 7

1. They monitor TCP handshaking to determine whether a requested session is legitimate
2. On establishment of that secure, legitimate connection, data packets can flow between the hosts without further checking

Question 8

At what layer of the OSI model do circuit level gateways work?

Answer 8

Circuit-level gateways work at the session layer of the OSI model, or as a “shim-layer” between the application layer and the transport layer of the TCP/IP stack.

Question 9

What’s the difference between basic firewalls and more effective ones?

Answer 9

Basic firewalls only monitor incoming traffic by default. An effective firewall monitors both incoming and outgoing traffic.

Question 10

What are the two types of firewall?

Answer 10

Hardware and software

Question 11

What is a hardware firewall?

Answer 11

A router or any other security product that is placed between the network and the outside world.

Question 12

Describe a software firewall

Answer 12

1. installed on the device
2. will deflect incoming attacks and hide open ports.
3. will give warning about suspicious outgoing traffic.
4. possible to have a software firewall on each computer for strong protection.
5. By installing software firewall, an attacker will have to cross two levels of security to access your device (the second being the hardware firewall).