Hi my name is she had from teach ethics.
Welcome you all to Cisco firewalls course.
In this video we will cover the general characteristics of the firewalls and how they can be implemented
within your network by the end of this video.
You will be able to understand what are the main services and concepts or of firewalls and when and
where you can implement each one of them.
So let's start
the general firewall characteristics any firewall provides a point of monitoring security security related
to events that happen in the network.
Any firewall has an audit and alarm configured.
It depends of course on the model and the brand of the firewall.
Mainly all traffic from the inside to the outside and vice versa must pass through the firewall.
So if we have here our inside local network and here to the outside world which is the Internet all
traffic between these two sides must pass through the firewall that we have in our network nowadays.
There are different and various types of firewalls used different brands different companies each firewall
has a different security policy depends of course on the model and the brand.
As I said OK what are firewalls can control mainly firewalls can control allowed users services and
behavior control which means firewalls can control access to a service for example which web service
FTB etc etc. according to which user is attempting to access this service.
Each company of course has its own requirements.
And based on this you can configure a firewall to either allow or block user access to a specific service
OK.
So mainly those are the general characteristics of any firewalls.
No matter what brand the firewall is.
OK so let's move to the next slide.
Firewalls can be a hardware or software.
For example if you have your computer you have Windows file that's a software firewall
OK.
So let's see the difference here between our weight software firewall approach
OK so firewalls can be implemented as both hardware and software.
Or a combination of both.
So many in your local network you can have either hardware or software or even both hardware and software
combined together.
Depends on your specific required requirements.
OK so network firewalls are frequently used to prevent an authorized Internet users from accessing private
networks.
So here if I have the internet and here's my private network mainly here the firewall is controlling
the access from the public network which is the Internet to the inside network.
I have included here a sample or a photo of a hardware firewall which we call a firewall appliance
just for reference.
So here is the difference.
Here is the hardware firewall approach on the left side.
And here is the software.
The software mainly
is installed on a computer or a server as I mentioned earlier.
Every year you have one despite all installed on your computer.
You have many different brands of firewall and software firewalls even free firewalls.
A vast AVC Norton Antivirus which is actually has a firewall features as well so the hardware firewall
is actually an appliance which is installed in and it's got a crack.
Just like a switch just like a regular switch or out there.
It's a hardware the device which is installed in and then it would crack and the software firewall is
installed on a server or a P.C. in your network.
OK so your internal network topology and complexity dictates you whether to use a hardware or software.
So if you are if you are a home user for example you don't actually need to purchase or buy a hardware
appliance it's expensive.
It costs money.
For example Cisco firewall can range from five thousand dollars and above so a hardware firewall is
a physical device attached to a network.
While the software is installed on your computer even on your phone or tablet
OK so let's see here.
The differences between the hardware and firewall.
Here is the question.
Do I use a hardware or software firewall.
As I said it depends on your specific requirements and budget.
So the hardware firewall of course it's more expensive
the software is kind of cheap.
You can even get it for free the hardware firewall is more secure.
As a general rule any hardware based solution is better than a software.
Of course we are talking about the business environment here not like for home use.
So the hardware approach is more secure but you spend money you pay more the hardware approach takes
some time to distinguish programs why because as a hardware device it needs some time to recognize what's
going on on the network but the software is just like a simple program you install in your computer
and it can quickly distinguish programs and so other software so the hardware takes time more secure
more expensive and it's recommended for business use OK
so let's summarize this the hardware firewall approach will have a better security and preferred by
most business users but of course you'll pay for that.
It's more expensive software is for home use doesn't require too much complex or complicated configuration
but of course you can't implemented in a business environment because it's just like a basic solution
which you can't implement in our business environment.
All right so let's move to the next and last slide a firewall logging
firewall logging merely means that the firewall log and records what's going on on your network.
Of course it will not log every single event that happens to log the important events like somebody's
trying to break in into your network a connection block the connection allowed.
So logging means actually the firewall logs events based on a specific configuration or specific settings
that you
you implement on your site.
All right.
Here you go.
Here are the main information that I look for or look can include the time time of the event when this
event happened.
Direction was this event an incoming or outgoing event.
Was it a traffic coming from the outside to the inside or on the other way the opposite way next.
The action taken what action the firewall took.
Did it block this connection allow it you even ask you what to do.
So there actually is a very important factor here some firewalls also include the protocol used for
the connection whether it's a UDP the DCP ICMP or ICMP which is actually a messaging protocol here.
Icmp source address where the connection originated is from what is the IP of the source that originated
the traffic as well as the source port.
What is the port number from where that connection was established.
Destination address.
What was the destination or the IP address that was intended by the connection.
And of course also the destination port.
So mainly why do we need logging and why logging is important here.
Because we need actually to keep track of the history and the past actions of the fire or what actions
the fireball took what happened on that time.
And this is only of course for troubleshooting purposes.
Thank you very much for watching.
I hope you enjoyed the video on the next video.
We will discuss that different types of firewalls and when and where they can be implemented.
Thank you.