Understanding Firewalls
A FIREWALL is a fundamental security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. In the realm of NETWORK-SECURITY, it serves as the primary defense mechanism between a private network and the INTERNET. According to Fortinet, firewalls have evolved significantly since their inception to counter increasingly sophisticated threats.
Core Technologies
Traditional firewalls relied on PACKET-FILTERING to inspect headers and block traffic based on IP addresses or ports. This was succeeded by STATEFUL-INSPECTION, which monitors the state of active connections to determine which network packets to allow through. Today, NEXT-GENERATION-FIREWALLS (NGFW) provide more granular control by incorporating APPLICATION-LAYER filtering and INTRUSION-PREVENTION-SYSTEMS. These systems are often managed via SOFTWARE-DEFINED-NETWORKING environments.
Deployment Models
Firewalls can be deployed as hardware appliances, software installed on OPERATING-SYSTEMS, or as CLOUD-FIREWALLS, also known as Firewall-as-a-Service (FWaaS). Leading vendors like CHECK-POINT-SOFTWARE and CISCO-SYSTEMS define industry standards for ACCESS-CONTROL-LISTS and VIRTUAL-PRIVATE-NETWORKS. Detailed technical specifications and definitions regarding these technologies can be found via the NIST Glossary.