A firewall for all occasions
Firewalls are ubiquitous, but no size fits all. When it comes to granular security analysis, gateway-based firewalls (proxy-based) are the best, closely followed by stateful inspection, then stateful (also called dynamic) filters, with static packet filters providing the least security processing. Yet, in terms of manageability, the list is reversed: packet filters are the most "plug-and-playable"; app proxies are the least.
So how can you decide which type of firewall is right for your organization? Which one strikes a good balance between security and functionality and cost and manageability?
To answer this question, I'll examine three infrastructures: a small office; a medium- or large-sized office with common needs; and a large office with complex needs.
[ Read more ]
- Article: Firewall + Firewall Policy = Improved Security (2 April 2003)
- Article: Interview with Lisa Yeo, author of "Personal Firewalls for Administrators and Remote Users" (30 March 2003)
- Review: Personal Firewalls for Administrators and Remote Users (13 March 2003)
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.