Logan Fox, welcome to another video from section
10 in this video. As I told you in the last video.
I'm going to talk about what our firewalls and ideas, so
we can have an overview to wear exactly firewall 11. We're
talking about when we sing them and map
phase the firewall or something like that. And also, I'm going to
just gonna have a tip on overview and ideas as an
eye pieces.
No. Have an over. We all and have a good knowledge about
give Security in that. Exactly.
What is that? And we're gonna answer some questions in that for
sure. So a very common
Korea asked by never figured administrator is
that what is the difference between a fire modes IPS
and ideas?
So I'm going to first talk about that and
then pure some example, maybe
it'll calisthenics. So all the three terms
related to providing security to network and
are considered essential component, network security,
especially in a data center networks, and
a big data servers and actually any company.
So the main difference being that far, apart from
actions, such as blocking and filtering of
traffic while an IPS or ideas detects,
an alert system, administrator or
prevent attack as pure configuration. So you may find that,
you know, the usual for one
your Windows machine. As Windows Defender. We
have been deceiving rather, you know, you're
onto errors, but if you have a firewall in a window, that's seven control
the output, an inbound and outbound.
Band in the network. So
that's a very basic firewall. So
if are all those traffic based on a set of the rules configure
and it's relies on a store. So this nation
addresses and ports. That's set
us too far wall who can deny any traffic
that does not meet any specific sector area.
But in other hand ideas is
a passive lead a device which watch
packets that we talked about last week Leo.
Of data transferring that Network comparing the
signatures patterns and sitting up an alarm on an
addiction on the suspicious activities.
And on the other hand, we have IPS that
is an active device working on letting line
mode and prevent attack by blocking it. So
let's say we
have some difference between them. So for example, a firewall is
a network security device that filters incoming and
outgoing networks traffic based on a prematurely
rules, but or ideas and IPS,
so maybe
want to know that ideas.
Based and then stand for institution detection
system. The device or
software application that monitor the
traffic from malicious activities or policy violation and
sins a lot on addiction firewall, 50
traffic's, based on IP address and port numbers,
but the principle of working in ideas,
the detector real-time traffic and looks for
traffic patterns and signatures and attack
them duration alerts, so,
How about the configuration work? The firewall is
in a layer 3 mode or transparent mode, but the
ideas is in line or as the end house with pain for
monitoring and detection action,
unauthorized, traffic detection by Farah
is blocked traffic, but in ideas is alert
or alarm on a detection of anomaly. So
of course based on the description that I gave you, it's
very important that if you have a network security of
your view, have any servers
This is very important to use ideas and eyepieces, and your systems,
and secure server, for sure beside your fire Road
averages, a basic things that try to block the traffic. And
it's not gonna always have be helpful for you. For
example, as we saw in our previous sections, we always
provide that solution to how to
get over the firewalls. Try to get a result at
the end. Let's do some examples. So
this is exactly how it works. We have the stitches here and
a router and a firewall here.
An IPS or ideas here, for example, this if there's internet here and
do the router here, that connect us to our switches. We
have firewall between institution rotor here and
then ideas. That suffer could be hard work
and clusters to adjust and try to detect any malicious activities.
And then our clients. Now,
they're how we have IPS them. Exactly,
like ideas, but it's will be placed
between the switches and a firewall. The see
our firewall in a Windows is a variegated normal.
But when we cut fire mode, you can see here that
the windows different file, click
on it and wait till it's open. So,
when you go to the security and maintenance or Network and
Sharing Center, or you can turn Windows Defender
on or off that need the permission activities
for administrator, so they can run
again with the
Run as Administration Advanced Securities and
a click. Yes.
All right, then we're gonna wait for printed, open the
video. This is our panel. We
have inbound rules and outbound result set. So
for example, you can set the rules for yourself in
your firewall as you may want to, but it's
also have some default rules. For example, the
inbound rules. We have so many default
rules here. For example, for any
Application. We have, there's some rules, for example, for
energy expectation. That is a Remote Management. We
have a portfolio as a profit private networks.
That's although and enable the
action is hello for the any desk.
And this is the path to program.
And is it Portugal? That's on a UDP and
any port is any and remote Port any. So
we can see that inbound rule here to send connection
to the outstanding, pound-and-a-half bound is
approved. Part file.
Also, also, you cannot deny or block
any connection as you want for exactly in boundary. Try
to give permissions, approve, or deny any
connection that send information to the outside the network
and
Outbound rules tried to block or confirm any
information that come to your network by outside
of the network. So, for example,
An inbound rules. You can continue your rule here,
as you can see.
When you click on it and choose your type
of role here, for example, you want to
give an Emporium a specific order.
For example, you can click next and clear your program or
maybe all program.
for example, if we do, I want to Reno private Network,
or maybe you can choose any port, you want click
next and then click all the remote ports on
the TCP or UDP, and I wanted to
Blocked a connection or a lot of connection or
allows connection of these secure. So if
you want to deny every connection remote based upon your UDP
port and denied your server, you can just click
but I kind of connection and click next and it's
done.
So, for example, this was how we working out
windows machines. We can see also how
it works in the Kali Linux in
the following videos. So we
have a quick brief on it, how it works. What
is it? And actually we saw you how Spyro work
exactly and logic behind it. In
the next video. I'm going to talk about what liability scanning and try to
give you some tips about it. Good luck.