NetEye firewall and Cisco router security issue

[KennedII]

Hi all,

Firewall has become a corporate network construction is a key component. But there are many users that the network already have a router, can achieve some simple packet filtering capabilities, so why should we use a firewall ? NetEye firewall and the industry's largest and most representative of the Cisco routers in a safe in contrast to articulate why the user network with the router, the firewall needs NetEye. Please suggest.

[Milton.J]

Generation router is based on a route network packets generated. Cisco router needs to be done is to a different network efficient routing of data packets, as to why the route, should it be routing, routing problems later if there is no concern, the concern is: Can the different segments of data packets routing in order to communicate. NetEye firewall is to generate in people for security needs. Whether packets can correct the arrival time of arrival, direction of the focus of concern is not NetEye firewall, focusing on the whether the packet should be passed, after the adoption of the network whether it will cause harm. Check and reply.

[Spyrus]

Cisco routers, the core ACL list is based on simple packet filtering firewall technology from the point of view, NetEye state-based packet filtering firewall is the application-level information-flow filtration. The following figure is one of the most simple applications: enterprise network, a host, through the Cisco router, internal network to provide services (assuming the services provided by port tcp 1455). In order to ensure security, the router need to configure it as follows: from outside to inside only allow client access to server ports of the Tcp 1455 and other refuse.Check and reply.

[Snake08]

The router's default configuration is not enough to security considerations will need some advanced configuration to achieve a number of preventive attack on the role of the development of the vast majority of security policies are based on the command line, and its rules for the safety of the formulation is relatively complex configuration a high probability of error. NetEye either the default configuration of the firewall to prevent all attacks, to achieve both a safe, security policy formulation is based on the whole GUI management tools, the development of its human security policy, configuration, simple and low error rate. Check and reply.

[Zachary]

Router is designed to forward packets, rather than designed as a full-featured firewall, so used for packet filtering, you need to carry out the operation is very large, on the router's CPU and memory requirements are very large, while the router because of its relatively high cost of hardware, its high-performance configuration, greater than the cost of the hardware. NetEye firewall hardware configuration is very high (using a common INTEL chip, high-performance and low cost), its software for data packet filtering carried out a special optimization, its main module runs on the operating system kernel mode, the design time give special consideration to the safety issue, and the performance of data packet filter is very high. As the router is a simple packet filtering, packet filtering rules to increase the number of articles, NAT rules, the increase in the number of articles on the performance of Cisco routers have a corresponding increase in the NetEye firewall uses a stateful packet filtering, rules of number, the number of NAT rules for the performance impact of close to zero. All the best.

[Big Fish]

NetEye firewall logs there are two kinds of storage media, including its own hard disk storage, and a separate log server; Focusing on these two stores, NetEye firewalls provide a strong audit analysis tool, allows administrators to easily analyze a variety of security hidden; NetEye firewall security incident response timeliness, but also reflects a variety of alarm in his way, including the beep, trap, e-mail, log; NetEye firewall also has real-time monitoring features, you can on-line monitoring through the firewall connections, It also can capture packets for analysis, non-analysis of network operation to remove a network failure to provide more convenient. Check and reply.