What is the role of the computer room firewall?

The so-called firewall refers to a protection barrier composed of software and hardware devices, constructed on the interface between the internal network and the external network, and between the private network and the public network. It is an image of obtaining a security method. It is a combination of computer hardware and software, which establishes a Security Gateway between the Internet and the Intranet to protect the internal network from unauthorized users. The firewall is mainly filtered by service access rules, verification tools, and bao. It consists of four parts: the firewall is a piece of software or hardware between the computer and the network it is connected to (the hardware firewall is used less, such as the Ministry of Defense and the main computer room, because it is expensive) .

The firewall has a good protection. The intruder must first pass through the firewall's security line to reach the target computer. You can configure your firewall to many different levels of protection. A high level of protection may prohibit some services, such as video streaming, but at least this is your own protection option.

Why do you need a firewall in the computer room?

A: The Internet firewall is mainly to prevent hackers from deliberately destroying three ways:

(1) Intrusion: The most common way of destruction, you can use the computer properly after the invasion. The intruder wants to become a legitimate user and use the computer arbitrarily.

(2) Denial of service: The easiest way to not directly damage the system. A hacker can smash a computer by issuing a flood-like garbage packet, making the system unable to provide services.

(3) Information theft: The hacker steals the user's account number and password, and can enter the computer to steal the required information.

What can the firewall do?

(1) The firewall is the focus of preservation decision

The firewall is a throat point. All incoming and outgoing transmissions must pass through this narrow, unique checkpoint. In terms of network security protection, the firewall provides a very large leverage benefit because it concentrates security measures on this checkpoint. .

(2) The firewall can enforce the preservation policy

The firewall enforces the platform's security policy, allowing only "approved" services to pass, and these services are set in the Policy.

(3) The firewall can efficiently record Internet activities.

Since all transmissions pass through the firewall, it becomes a good place to collect information and misuse information about the system and the network.

(4) Firewall can reduce the crisis of network exposure

The firewall can isolate the server inside the firewall from the external network, and avoid the problematic packet from affecting the security of the internal host.

What can't the firewall do?

(1) The firewall does not manage the internal wicked

If the wicked is already in the firewall, you can steal data, damage hardware and software, and modify the program without having to access the firewall. Internal threats require internal security measures such as computer room security management measures and personnel training

(2) The firewall can not connect without it.

For transmissions that do not pass through the firewall, the firewall will not work. For example, some stations allow dial-in access directly to internal hosts or technology and system administrators can set up access to the network for themselves.

(3) The firewall cannot protect against new threats

The firewall is designed to protect against known threats. A well-designed firewall may be able to protect against new threats. For example, except for a few reliable services, denying all other services can prevent users from setting up new and extremely insecure services. .

(4) The firewall cannot protect against viruses

The firewall can't prevent PC and Macintosh viruses from entering the network. Although the firewall scans the source address, destination address, and port number, it is not detailed information, and the most sophisticated firewall filtering or proxy software is also used for the firewall. Not very practical.

The purpose and role of the firewall

The development of the Internet has brought revolutionary reform and opening up to enterprises. Enterprises are trying to use it to improve market response speed and efficiency, so as to be more competitive. Through the Internet, enterprises can retrieve important data from different places, and at the same time face the new challenges and new dangers of data security brought about by the opening of the Internet: secure access by customers, vendors, mobile users, off-site employees and internal employees; Protect corporate confidential information from hackers and industrial espionage. Therefore, companies must add a safe "tiger", and where are these "wars" built?

There are two major applications based on the Internet system: Intranet and Extranet. Intranet uses the technology and equipment of the Internet to construct an enterprise 3W network on the Internet, which can put all the information of the enterprise; while the extranet is in the channel of the intranet under the demand of e-commerce and mutual cooperation, some information in other systems can be obtained. . Therefore, according to a company's security system, the firewall warfare must be located in the following locations:

1 Guarantee secure access to hosts and applications;

2 to ensure the security of a variety of clients and servers;

3 Protect key departments from internal attacks, external attacks, and secure access to employees, customers, and suppliers via the Internet and remote access. At the same time, the security of the firewall comes from its good technical performance.