{
    "content": "<h1>Understanding Firewalls<\/h1><p>A <a href=\"..\/FIREWALL\/\">FIREWALL<\/a> is a fundamental security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. In the realm of <a href=\"..\/NETWORK-SECURITY\/\">NETWORK-SECURITY<\/a>, it serves as the primary defense mechanism between a private network and the <a href=\"..\/INTERNET\/\">INTERNET<\/a>. According to <a href=\"https:\/\/www.fortinet.com\/resources\/cyberglossary\/firewall\">Fortinet<\/a>, firewalls have evolved significantly since their inception to counter increasingly sophisticated threats.<\/p><h2>Core Technologies<\/h2><p>Traditional firewalls relied on <a href=\"..\/PACKET-FILTERING\/\">PACKET-FILTERING<\/a> to inspect headers and block traffic based on IP addresses or ports. This was succeeded by <a href=\"..\/STATEFUL-INSPECTION\/\">STATEFUL-INSPECTION<\/a>, which monitors the state of active connections to determine which network packets to allow through. Today, <a href=\"..\/NEXT-GENERATION-FIREWALLS\/\">NEXT-GENERATION-FIREWALLS<\/a> (NGFW) provide more granular control by incorporating <a href=\"..\/APPLICATION-LAYER\/\">APPLICATION-LAYER<\/a> filtering and <a href=\"..\/INTRUSION-PREVENTION-SYSTEMS\/\">INTRUSION-PREVENTION-SYSTEMS<\/a>. These systems are often managed via <a href=\"..\/SOFTWARE-DEFINED-NETWORKING\/\">SOFTWARE-DEFINED-NETWORKING<\/a> environments.<\/p><h2>Deployment Models<\/h2><p>Firewalls can be deployed as hardware appliances, software installed on <a href=\"..\/OPERATING-SYSTEMS\/\">OPERATING-SYSTEMS<\/a>, or as <a href=\"..\/CLOUD-FIREWALLS\/\">CLOUD-FIREWALLS<\/a>, also known as Firewall-as-a-Service (FWaaS). Leading vendors like <a href=\"..\/CHECK-POINT-SOFTWARE\/\">CHECK-POINT-SOFTWARE<\/a> and <a href=\"..\/CISCO-SYSTEMS\/\">CISCO-SYSTEMS<\/a> define industry standards for <a href=\"..\/ACCESS-CONTROL-LISTS\/\">ACCESS-CONTROL-LISTS<\/a> and <a href=\"..\/VIRTUAL-PRIVATE-NETWORKS\/\">VIRTUAL-PRIVATE-NETWORKS<\/a>. Detailed technical specifications and definitions regarding these technologies can be found via the <a href=\"https:\/\/csrc.nist.gov\/glossary\/term\/firewall\">NIST Glossary<\/a>.<\/p><h3>Related Topics<\/h3><ul><li><a href=\"..\/CYBERSECURITY\/\">CYBERSECURITY<\/a><\/li><li><a href=\"..\/INTRUSION-DETECTION-SYSTEMS\/\">INTRUSION-DETECTION-SYSTEMS<\/a><\/li><li><a href=\"..\/NETWORK-TOPOLOGY\/\">NETWORK-TOPOLOGY<\/a><\/li><li><a href=\"..\/ZERO-TRUST\/\">ZERO-TRUST<\/a><\/li><\/ul>",
    "tags": [
        "firewalls",
        "cybersecurity",
        "network security",
        "packet filtering",
        "stateful inspection",
        "ngfw",
        "network infrastructure",
        "infosec",
        "internet protocol",
        "access control"
    ]
}