|
Firewalls
How
secure is your computer network? Chances are that it is not nearly
as secure as you think it is. In the Internet age, every one with
a computer and a phone line is a potential threat.
Security
Misconceptions:
1.
I have nothing on my network that anyone would want.
2.
My ISP is providing a firewall…I think.
3.
I can't afford a firewall.
To
which we reply:
1.
Often, hackers are kids just looking for something to do. You also
might be surprised what people can find on your network.
2. Usually they aren't. They often mention the word "firewall" in
passing while you are working on an agreement, but it rarely makes
it into the contract.
3. Yes, firewalls are expensive. Replacing a network is much more
expensive.
Vulnerabilities:
1.
Theft - Hackers often go for credit card numbers and social security
numbers, but they have also been known to steal things like software
and passwords for later use.
2. Data Destruction - Crackers often break in just to cause destruction.
This happens more often with websites, but databases are also vulnerable.
3.
Network Slow Downs - Often hackers use open sites to cover their
tracks. If your open server gets noticed, it will no doubt be shared
with other hackers. This can greatly increase the traffic on your
network and can eventually bring it down.
4.
Liability Issues - A good example of this is spam. Because spam
is illegal, perpetrators like to find another company's open e-mail
server through which to send mail. Your company can be held liable
for this spam if it is traced back to your server.
Possible
Solutions:
Firewall
solutions come packaged in two basic forms: software solutions and
hardware solutions.
Software
solutions are generally more expensive, but offer more security
and logging capabilities. Hardware solutions are less expensive,
but are usually harder to configure and are not quite as secure.
Here
are some techniques that firewalls use (most use a combination of
at least 2 of the following):
- Packet
filter: Looks at each packet entering or leaving the network
and accepts or rejects it based on user-defined rules. Packet
filtering is fairly effective and transparent to users, but
it is difficult to configure. In addition, it is susceptible
to IP spoofing.
- Application
gateway: Applies security mechanisms to specific applications,
such as FTP and Telnet servers. This is very effective, but
can impose a performance degradation.
·
- Circuit-level
gateway: Applies security mechanisms when a TCP or UDP connection
is established. Once the connection has been made, packets can
flow between the hosts without further checking.
- Proxy
server:
Intercepts all messages entering and leaving the network.
The proxy server effectively hides the true network addresses.
If
you have specific questions about your network and its level of
security, please call the office at 317/733-2388.

|