Network Firewall and its types

What is a Firewall, and how does it work?

• A firewall is a network security hardware or software application that monitors and filters incoming and outgoing network traffic according to a set of security rules. 
• It serves as a firewall between internal private networks and public networks (such as the public Internet).
• A firewall's principal goal is to protect the computer from viruses and assaults.
• A firewall is a cyber security solution that filters network traffic and assists users in preventing harmful malware from gaining access to the Internet on compromised machines.

What is Firewall?

Firewall is a Software or Hardware?

• A firewall, as discussed previously, can be a network security equipment or a computer software application. This indicates that the firewall is available on both hardware and software levels, albeit it is preferable to have both.\
• The functionality of each format (a firewall implemented as hardware or software) varies, but the goal remains the same. 
• A hardware firewall is a piece of hardware that connects a computer network to a gateway. Consider a broadband router. 
• A software firewall, on the other hand, is a basic application that works with port numbers and other installed software to protect a computer.
• Aside from that, cloud-based firewalls are available. FaaS is a typical nickname for them (firewall as a service).

What is the purpose of a firewall?

• Firewalls are used to protect against malware and network-based threats.  
• These firewalls serve as a barrier or a gatekeeper. They keep track of every connection our machine makes to another network. 
• They only let data packets to pass through them if the data is coming or going from a trustworthy source designated by the user.
• Firewalls are built in such a way that they can identify and counter-attack threats throughout the network fast. 
• They may work with regulations that have been set up to defend the network, as well as conduct fast inspections to look for any unusual behavior. 
• In other words, the firewall may be used as a traffic controller.

The following are some of the major dangers of not having a firewall:

1. Open Access.
2. Lost or Comprised Data.
3. Network Crashes.

1. Open Access.

• If a computer is not protected by a firewall, it allows unrestricted access to other networks. This implies it accepts any type of connection that is made through another person. 
• It is impossible to identify threats or assaults going over our network in this circumstance. We render our devices exposed to malicious users and other undesired sources if we don't use a firewall.

2. Lost or Comprised Data.

• We're leaving our gadgets open to everyone if we don't use a firewall. This implies that anyone, even the network, may gain access to our device and have total control over it. 
• Cyber criminals can simply destroy our data or utilise our personal information for their own gain in this situation.

3. Network Crashes.

• Anyone could gain access to our network and shut it down if we didn't have a firewall. It may prompt us to devote precious time and resources to restoring our network's functionality.
• As a result, it is critical to employ firewalls to protect our network, computer, and data from unauthorized access.

How does a firewall work?

• A firewall system examines network traffic according to pre-set rules. The traffic is subsequently filtered, and any traffic from untrustworthy or questionable sources is blocked. Only traffic that has been set to accept is allowed in.
• Firewalls usually intercept network traffic at a computer's port, which is where it enters the network. 
• Based on pre-defined security criteria, firewalls allow or block certain data packets (units of communication carried over a digital network). 
• Only trusted IP addresses or sources are allowed to send traffic inbound.

Working of Firewall

Very basic functions of Firewall

• As previously observed, the firewall acts as a gatekeeper. It examines all attempts to obtain access to our operating system and blocks traffic from unidentified or unknown sources.
• We can think of the firewall as a traffic controller since it operates as a barrier or filter between the computer system and external networks (such as the public Internet). 
• As a result, the major function of a firewall is to protect our network and information by managing network traffic, prohibiting unwanted incoming network traffic, and validating access by scanning network traffic for dangerous things like hackers and viruses.
• Most operating systems (for example, Windows OS) and security applications provide firewall capability by default. As a result, it's a good idea to make sure those choices are enabled. 
• We can also adjust the system's security settings to update automatically whenever new information becomes available.

Firewalls have evolved to be quite strong, with built-in functionality such as:

1. Preventing Network Threats.
2. Control based on the application and the user's identity.
3. Support for Hybrid Cloud.
4. Performance that scales.
5. Control and management of network traffic.
6. Validation of access.
7. Keep track of what happens and report on it.

Firewall's Limitations

• Firewalls are the first line of defense when it comes to network security. 
• However, the issue remains as to whether these firewalls are powerful enough to protect our gadgets from cyber-attacks. 
• It's possible that the answer is "no." When utilizing the Internet, it is important to utilise a firewall system. 
• Other defensive mechanisms, on the other hand, should be used to assist safeguard the network and data saved on the computer. Because cyber dangers are always changing, a firewall should not be the only thing you think about when it comes to securing your home network.
• Firewalls are obviously important as a security solution but they have some limitations:

1. Firewalls are unable to prevent people from accessing dangerous websites, leaving the organisation open to internal threats and attacks.
2. Firewalls cannot prevent virus-infected data or software from being sent.
3. Passwords can't be protected by firewalls.
4. If security rules are mis-configured, firewalls will not be able to protect you.
5. Non-technical security vulnerabilities, such as social engineering, are not protected by firewalls.
6. Firewalls cannot prevent or halt attackers using modems from calling in or out of the internal network.
7. Firewalls can't protect a system that has already been compromised.

Note:- As a result, it's a good idea to maintain all Internet-connected gadgets up to date. This covers the most recent versions of operating systems, web browsers, apps, and other security software (such as anti-virus).

Different Types of Firewalls used in networking.

Different types of firewalls exist, each with its own structure and functioning.

1. Proxy Firewall.
2. Packet-filtering firewalls.
3. State-full Multi-layer Inspection (SMLI) Firewall.
4. Unified threat management (UTM) firewall.
5. Next-generation firewall (NGFW).
6. Network address translation (NAT) firewalls.

What is the difference between a firewall and an anti-virus programme?

• Antivirus software is used to protect computers from viruses by scanning, detecting, and removing them. Most antivirus software operates in the background once installed, providing real-time protection against viral assaults.
• Comprehensive virus protection systems guard your data and hardware against viruses like worms, Trojan horses, and adware, and may also include features like customized firewalls and website filtering.
• Anti-viruses and firewalls are both systems that defend devices from viruses and other sorts of Trojans, but they have important distinctions.

   

Definition	A firewall is a system that examines and filters incoming and outgoing data packets according to pre-determined criteria.	Anti-virus software is a sort of software that serves as a cyber-security measure. Anti-virus software's basic role is to monitor, identify, and delete any suspicious or suspicious files or software from the device.
Structure	Firewalls can be either physical or software. A physical firewall is a router, whereas a software firewall is a basic firewall programme installed on the system.	Antivirus is only available as software. Anti-virus is an application that, like all other apps, is installed on the device.
Implementation	Firewalls are available in both hardware and software, therefore they may be implemented in any method.	Anti-virus is only possible to apply at the software level since it is in the form of software. At the hardware level, there is no way to incorporate anti-virus.
Responsibility	A firewall is also referred to as a network management system. It basically implies that firewalls are in charge of monitoring and filtering network traffic.	Anti-virus software is in charge of identifying and eradicating viruses from computers and other devices. Viruses can be transmitted by infected files or software.
Scalability	Because the firewall allows both hardware and software implementations, it is more scalable than anti-virus software.	Antivirus software is often thought to be less scalable than firewall software. Because anti-virus software can only be implemented at the software level, this is the case. They don't support implementation at the hardware level.
Threats	A firewall is primarily used to defend against network-based assaults. Is it mostly comprised of external network threats? Routing attacks and IP spoofing are two examples.	Anti-virus software is primarily used to detect, locate, and remove viruses, malware, and Trojans that can destroy system files and software as well as share personal information with hackers (such as login passwords, credit card numbers, and so on).