Firewall, Intrusion Detection and Prevention

Systems and sensitive data need to be protected from destructive forces or information theft. Firewalls make this possible by filtering incoming and outgoing traffic that flows through your system. Firewalls generally uses rule sets which permit, deny or proxy data through a computer network of different trust levels. Firewall needs to be configured properly and wisely - else it would be worthless or even a performance bottleneck. The firewall configuration requires a detailed and complete understanding of the entire system and its function. Based on this knowledge the firewall rule set is defined and implemented (default-allow or default-deny based configurations). Certain firewall programs does not only filter traffic, they do even more complicated tasks like tracking the number, duration, lifetime of connections from specific locations and decide whether they could be malicious, and block the IPs/IP ranges automatically. These firewalls protect the systems proactively and keep scaling up protection.

• Windows Firewalls generic
• Linux Firewalls iptables/ipchains (Obsolete)
• FreeBSD and MacOS Firewalls IPFW
• OpenBSD Firewalls pf
• Network layer and packet filter
• Application layer
• Proxy
• Access Control List (ACL)
• Network Address Translation (NAT)
• Denial-Of-Service attacks (DOS) and DDOS
• SYN Flood
• Stateful and Stateless firewalls
• Default-allow and default-deny firewalls

Intrusion Detection

Endpoint security - your endpoints are still being exposed to threats from internal and external sources that are often able to circumvent an enterprise's perimeter defenses.