How to choose a firewall

[Laramie]

Hi all,

Now on the market there are some different types of firewalls. For my organization to choose a firewall is a daunting job - especially for the one filled with rumors and patent and trademark industry. I want the basics of firewall technology, as well as features of firewall. Please suggest. Thanks in advance.

[Steve123]

Packet filtering firewall (barrier-type router firewall) using simple rules, to encounter each packet according to its own characteristics evaluated. They do not keep records of each data packet history, the basic packet header inspection team. The simplicity of this test accelerated pace. This firewall is the cheapest option, but they are also the least flexible and the most vulnerabilities. Your luck is better is that you already have a packet filtering firewall that can run the equipment - it is your router. All the best.

[Shen]

Stateful Inspection Firewall (dynamic packet filtering firewall) goes a step further. They track the three-way TCP simultaneous exchange, to ensure that data packets will always be an established network segment (for example, there is no feature to set SYN bit) to the firewall to detect the activities of the last one to respond. Open the first connection request received by the stateful inspection firewall rules database restrictions. Check and reply.

[Big Fish]

Companies are more suited to your appliance solutions or software solutions. Devices are generally more easy to install. Under normal circumstances you just inserted into the appropriate Ethernet cable, to the basic network configuration, you are ready to configure the firewall rules. On the other hand, more difficult to install the software firewall, and the adjustment is necessary. They also lack a firewall is usually inherent in the operating system security. You can guess, a number of more expensive equipment. All the best.

[Zachary]

Application proxy firewall has the most advanced performance. In the state on the basis of inspection firewall, they broke through the client and server connectivity. Connected to the client and the firewall, the firewall can analyze the request (including the contents of the application layer packet detection). If the firewall rules of information transmission can be displayed, then the firewall will be to establish a connection with the server to continue to play in the communication process the role of the media. When the firewall and Network Address Translation protocol (Network Address Translation) a combination of these two hosts are even less able to prevent the existence of other hosts they are convinced that they are directly related to the firewall communication. Best of luck.

[Spyrus]

Even if the device can run the operating system, firewall management in your career, you may sometimes need to use the operating system. If you are a Linux system operator, you may not want to choose a Windows-based firewall systems. On the other hand, if you do not know / var / log to / dev / null, you may want to avoid the use of Unix-based system solutions. Although, I do not know your needs, do not give you recommend a specific firewall, but the process of answering these questions can help you made up his mind to make the right choice. With these answers, the choice of buying a firewall, you should be able to intelligently evaluate a variety of products currently on the market cost / benefits. Best of luck.