Shulou(Shulou.com)06/01 Report--

‍

Many people do not know about firewalls. Today, let's briefly talk about the classification of firewalls.

The firewall is the most important security device in the network environment, and the firewall is the outflow entrance of all network traffic between the internal network and the external network. Only the data that conforms to the security policy can pass through the firewall, which has a strong anti-immunity.

Let's take a look at the classification of firewalls.

A firewall is mainly divided into software firewall and hardware firewall:

ISA and IPTABLES are commonly used in software firewalls.

In fact, software firewall is to use software to achieve the function of firewall, according to national laws and regulations, enterprises and institutions all have to use legitimate software, but compared with hardware firewall, software firewall is much cheaper than hardware firewall.

For the software firewall, what is needed is to have special IT operation and maintenance personnel to maintain it, because in terms of probability, the software firewall needs to consume more human resources than the hardware firewall.

Hardware firewalls mainly include JUNIPER, CISCO, Huawei 3COM, Ruijie and other brands. For some enterprises or departments that have high requirements for network security, it is recommended to use hardware firewalls. Hardware firewalls are much stronger than software firewalls in terms of energy, and generally speaking, hardware firewalls have special after-sales maintenance. Although the hardware firewall is more expensive, but from its function, it is still good value for money.

Second, from the technical classification of firewalls:

1 packet filtering firewall

The packet filtering firewall works at the network layer and the transport layer.

Packet filtering technology can allow or deny some packets to be transmitted on the network, which is mainly based on the destination address of the packet, the source address of the packet and the transmission protocol of the packet.

Of course, packet filtering also has its disadvantages, its disadvantage is that some flow control can not be achieved.

2 apply proxy firewall

The application firewall works at the application layer.

3 packet status monitoring firewall

4 compound firewall

Third, it is classified from the performance of the firewall:

From low to high are

1 person firewall

The advantage is cheap and easy to configure.

The disadvantage is that the performance is relatively poor and only basic control can be carried out.

2 Router Firewall

The advantages are low cost and integrated configuration and investment protection.

The disadvantage is that the function is limited and can only do basic control and affect performance.

3 hardware firewall

Hardware firewall is divided into low-end hardware firewall and high-end hardware firewall.

The low-end hardware firewall has the advantages of low cost and simple configuration, and its disadvantages are limited function and limited upgrade ability.

High-end hardware firewall is the best choice for large units or enterprises or institutions with high requirements for network security.

Its advantage is that

High performance, high availability, modular system, remote management, good adaptability, application filtering

Its disadvantage is that

The cost is relatively high and the configuration is complicated.

4 server firewall

Server firewall is to add the function of firewall to high-end servers to provide reliable and fast protection on standard software and software systems.

Server firewalls are suitable for units with high investment on special hardware or software platforms.

Its advantages are high performance and integrated services, as well as availability, adaptability and scalability.

Its disadvantages are that it requires high-end hardware and is vulnerable to * and high maintenance costs.

‍

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.