Firewalls

Hits: 6828
Rating: 9.00
Rate it
Comments: (3)

"You've just finished implementing your new, shiny firewall. Or perhaps you've just inherited several new firewalls with the company merger. Either way, you are probably curious as to whether or not they are implemented properly. Will your firewalls keep the barbarians out there at bay? Does it meet your expectations? This paper will help you find out. Here you will find a guide on how to audit your firewall and your firewall rulebase. Examples provided here are based on Check Point FireWall-1, but should apply to most firewalls." By Lance Spitzner.

Hits: 330
Rate it
Comment on it

Building a solid rulebase is a critical, if not the most critical, step in implementing a successful and secure firewall. ... Far too often in my security audits I see $50,000 firewalls exposing organizations to great risk, all because of a misconfigured rule." From WindowsSecurity.com.

Hits: 267
Rate it
Comment on it

"It's a buffer zone between a completely unsafe network (like the Internet) and a relatively trusted network (like your private LAN). The primary purpose for this separation is so that a compromise in your DMZ does not automatically result in a compromise of your private network as well." Lockergnome.

Hits: 375
Rate it
Comment on it

"This document is intended to explain why network logging and log analysis is important, and provide instructions for people who want to do this on their Cisco equipment (especially the PIX firewall) without spending a lot of money. Although you may not get all of the spiffy features that you will find in high-end offerings from companies like Cisco, NetIQ, Symantec and others, you can get a very good security bang for the buck with simple and inexpensive systems.

"Although this document is specifically intended for logging on a Cisco PIX, pretty much the same commands should work for other devices such as routers. You will see different screens, and Sawmill may detect them differently, but it is essentially the same process."

Hits: 621
Rate it
Comment on it

Usenet newsgroup.

Hits: 111
Rate it
Comment on it

From Hacking Linux Exposed: "Security is not just protecting yourself from others, you must protect others from yourself. Egress filtering is an important part of any firewall setup."

Hits: 91
Rate it
Comment on it

From Network World Fusion.

Hits: 251
Rate it
Comment on it

Moderated e-mail list on firewalls and related security topics.

Hits: 96
Rate it
Comment on it

"Relevant topics include the design, construction, operation, maintenance, and philosophy of Internet firewall security systems."

Hits: 57
Rate it
Comment on it

"This document contains numerous recommendations for choosing, configuring, and main-taining firewalls." Recommendations for the National Institute for Standards and Technology. 1.2M-bit PDF file.

Hits: 244
Rate it
Comment on it

Often, the best choice for security is a firewall that offers a hybrid architecture combining packet filtering and application layer proxies. Network World Tech Update, 04/01/02.

Hits: 92
Rate it
Comment on it

"Log Analysis is one of the great overlooked aspects of operational computer security. Many organizations spend hundreds of thousands of dollars on intrusion detection systems (IDS) deployments - but still ignore their firewall logs. Why? Because the tools and knowledge to make use of that data are often not there, or the tools that exist are too inconvenient. You should expect that to change. Right now, IDS vendors are up against the wall with the volumes of data they produce; the next wave in security is to try to usefully correlate and process the contents of multiple logs."

Features a library of articles on how to read and manage your logs.

Hits: 93
Rate it
Comment on it

"Administrators of enterprise level networks often don't pay much attention to the personal firewall market. After all, you need something much more sophisticated to protect your corporate network. But what about the telecommuters and on-the-road executives who connect to your company's network from remote locations? This article looks at how and why you should develop a policy requiring that remote access users have personal firewalls installed - and enabled! - and how to enforce that policy, as well as an overview of some of the personal firewall products available that will do the job at low or no cost." WindowSecurity, 08/12/04.

Hits: 129
Rating: 1.00
Rate it
Comment on it

Describes a technique for protecting a network by requiring outside nodes seeking access to "knock" on ports in a specific, secret sequence. Also see this critique of port knocking.

Hits: 101
Rate it
Comment on it

Or "Why firewalls shouldn't be considered a ultimate weapon for network security," a.k.a. "Secure TCP-into-HTTP tunnelling guide."

Hits: 83
Rate it
Comment on it

Microsoft tips for protecting home networks and PCs.

Hits: 103
Rate it
Comment on it

Two-part series on using Sun's firewall product.

Hits: 94
Rate it
Comment on it

Review: Its low cost might be outweighed by latency and degraded throughput when used as a firewall. Network World, 04/28/03.

Hits: 70
Rate it
Comment on it

Detailed vendor specs on application firewalls. Constantly updated.

Hits: 150
Rate it
Comment on it