Firewall Fundamentals

, by Noonan, Wes; Dubrawsky, Ido

Write a Review

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781587052217 | 1587052210
Cover: Paperback
Copyright: 6/2/2006

Rent

(Recommended)

$38.15

Term

Due

Price

Semester

Dec 13

$40.16

Quarter

Aug 16

$38.15

Short Term

Jul 3

$36.14

*This item is part of an exclusive publisher rental program and requires an additional convenience fee. This fee will be reflected in the shopping cart.
Buy Used

Usually Ships in 3-5 Business Days

$42.76
Buy New

Currently Available, Usually Ships in 24-48 Hours

$57.61
eBook

Available Instantly

Online: 1825 Days

Downloadable: Lifetime Access

$62.09

Summary

Author Biography

Supplemental Materials

The essential guide to understanding and using firewalls to protect personal computers and your network.

Introduction

xxii

Part I Introduction to Firewalls

(82)

Introduction to Firewalls

(22)

What Is a Firewall?

(1)

What Can Firewalls Do?

(6)

Firewalls Manage and Control Network Traffic

(1)

Packet Inspection

(1)

Connections and State

(1)

Stateful Packet Inspection

(1)

Firewalls Authenticate Access

(1)

Firewalls Act as an Intermediary

(1)

Firewalls Protect Resources

(1)

Firewalls Record and Report on Events

(1)

What Are the Threats?

(7)

Targeted Versus Untargeted Attacks

(1)

Viruses, Worms, and Trojans

(1)

Malicious Content and Malware

(1)

Denial of Service

(1)

Zombies

(1)

Compromise of Personal Information and Spyware

(1)

Social Engineering

(1)

New Attack Vectors

(1)

Insecure/Poorly Designed Applications

(1)

What Are the Motives?

(1)

Security Policies

(2)

Examples of Security Policies

(1)

Firewalls and Trust

(1)

Determining If You Need a Firewall

(2)

Summary

(3)

Firewall Basics

(16)

Firewall Taxonomy

(2)

Personal Firewalls

(1)

Network Firewalls

(1)

Firewall Products

(3)

Software Firewalls

(1)

Appliance Firewalls

(1)

Integrated Firewalls

(1)

Firewall Technologies

(8)

Personal Firewalls

(1)

Packet Filters

(1)

NAT Firewalls

(2)

Circuit-Level Firewalls

(1)

Proxy Firewalls

(1)

Stateful Firewalls

(1)

Transparent Firewalls

(1)

Virtual Firewalls

(1)

Open and Closed Source Firewalls

(1)

Summary

(2)

TCP/IP for Firewalls

(42)

Protocols, Services, and Applications

(9)

The OSI Model

(1)

The Application Layer

(1)

The Presentation Layer

(1)

The Session Layer

(1)

The Transport Layer

(1)

The Network Layer

(1)

The Data Link Layer

(1)

The Physical Layer

(1)

The Encapsulation Process

(1)

The Department of Defense (DoD) Model

(2)

How Firewalls Use Protocols, Applications, and Services

(1)

Internet Protocol (IP)

(5)

IP Packet Structure

(1)

The IP Packet Header

(3)

Bad IP Packets

(1)

Transmission Control Protocol (TCP)

(4)

TCP Segment Structure

(1)

TCP Segment Header

(1)

Bad TCP

(1)

User Datagram Protocol (UDP)

(2)

UDP Message Structure

(1)

UDP Datagram Header

(1)

Bad UDP

(1)

Internet Control Message Protocol (ICMP)

(3)

ICMP Message Structure

(1)

Bad ICMP

(1)

Addressing in IP Networks

(5)

Physical Addresses

(1)

Logical Addresses

(1)

IP Addressing

(1)

IP Address Classes

(1)

Classless Interdomain Routing (CIDR)

(1)

Subnets

(1)

IPv6

(1)

Network Address Translation (NAT)

(3)

NAT Implementations

(1)

NAT and IPsec: The Issues and the Solutions

(1)

Broadcast and Multicast

(1)

IP Services

(1)

IP Routing

(5)

Types of Routing

(1)

How the IP Routing Process Works

(2)

Different Classes of Routing Protocols

(1)

Common Routing Protocols

(1)

Routing Information Protocol

(1)

Open Shortest Path First

(1)

Border Gateway Protocol

(1)

Applications Using IP

(2)

Common Applications Using IP

(1)

Less-Common Applications Using IP

(1)

Protocols Used to Implement Security

(1)

Summary

(2)

Part II How Firewalls Work

(142)

Personal Firewalls: Windows Firewall and Trend Micro's PC-cillin

(20)

Windows Firewall and Windows XP

(9)

How Windows Firewall Works

(1)

Configuring Windows Firewall

(5)

Windows Firewall Features

(1)

Windows Firewall Checklist

(2)

Trend Micro's PC-cillin Firewall Feature

(9)

PC-cillin Requirements

(1)

How the Trend Micro Firewall Works

(1)

Configuring the Trend Micro Firewall

(6)

Trend Micro Firewall Features

103

(1)

Trend Micro Firewall Checklist

103

(2)

Summary

105

(2)

Broadband Routers and Firewalls

107

(18)

How Broadband Routers and Firewalls Work

107

(2)

Linksys Broadband Routers/Firewalls

109

(3)

Security and Filtering Features

109

(1)

Routing Features

110

(1)

Management and Administration Features

110

(1)

Miscellaneous Features

111

(1)

Linksys Requirements

112

(1)

How the Linksys Router/Firewall Works

112

(3)

Filtering Traffic from External Sources

112

(1)

Port-Range Forwarding

112

(1)

Port Triggering

113

(1)

DMZ Forwarding

114

(1)

Filtering Traffic from Internal Sources

114

(1)

Configuring Linksys

115

(8)

Configuring Basic Setup

116

(1)

Configuring Security

117

(2)

Configuring Applications & Gaming

119

(2)

Configuring Administration

121

(2)

Linksys Checklist

123

(1)

Summary

123

(2)

Cisco PIX Firewall and ASA Security Appliance

125

(36)

PIX/ASA Features

125

(2)

Choosing Between the PIX and the ASA

127

(1)

Cisco PIX Firewall and ASA Models

128

(2)

SOHO Solution

128

(1)

Medium- to Large-Office Solution

128

(1)

Enterprise Office and Service Provider Solution

129

(1)

How the PIX/ASA Firewall Works

130

(7)

Firewall Security Policy

130

(1)

Separate the Network into Zones Based on Security Levels

131

(1)

Use ACLs to Permit or Deny Traffic

131

(1)

Apply NAT

131

(1)

Apply AAA for Through Traffic

132

(1)

Apply Web or FTP Filtering

132

(1)

Firewall Modes of Operation

132

(1)

Stateful Inspection

133

(1)

Application Inspection

134

(3)

Configuring the Cisco PIX/ASA

137

(20)

Assigning IP Addresses to the Firewall Interfaces

138

(1)

Assigning IP Addresses in PIX 6.x

138

(1)

Assigning IP Addresses in PIX/ASA 7.x

139

(1)

Configuring the Firewall Name, Domain Name, and Passwords

140

(1)

Configuring the Firewall Routing Settings

141

(1)

Configuring the Firewall for Remote Management Access

141

(1)

Configuring Telnet Access

141

(1)

Configuring SSH Access

142

(1)

Configuring ASDM/PDM Access

143

(2)

Configuring NAT Settings for Outbound Access

145

(1)

Configuring NAT for PIX 6.x

145

(1)

Configuring NAT for PIX/ASA 7.x

146

(1)

Configuring the ACLs

147

(1)

Defining the ACL and Implementing the ACEs

147

(4)

Assigning the ACL to an Interface

151

(1)

Configuring Logging on the Firewall

152

(1)

Configuring Console, Monitor, or ASDM Logging

153

(3)

Configuring Logging to a Remote Syslog Server

156

(1)

PIX/ASA Checklist

157

(2)

Summary

159

(2)

Linux-Based Firewalls

161

(16)

NetFilter Features

162

(1)

NetFilter Requirements

162

(1)

How NetFilter Works

162

(4)

Configuring NetFilter

166

(8)

IPTables Command-Line Tool

168

(1)

Firewall Builder

169

(1)

Firestarter

170

(1)

Webmin

171

(3)

NetFilter Checklist

174

(1)

Summary

175

(2)

Application Proxy Firewalls

177

(32)

Application Layer Filtering

177

(2)

How Application Filtering Works

177

(1)

The Difference Between Application Filtering and Deep Packet Inspection

178

(1)

Proxy Server Functionality

179

(1)

Limitations of Application Proxy Firewalls

180

(1)

Microsoft ISA Server 2004 Firewall

180

(27)

Microsoft ISA Server 2004 Features

182

(1)

Security and Filtering Features

183

(1)

Firewall Clients and Authentication

184

(1)

Web Caching Server Functionality

185

(1)

Network Services Publishing

186

(1)

VPN Functionality

186

(1)

Management and Administration Features

186

(2)

Miscellaneous Features

188

(1)

Microsoft ISA Server 2004 Requirements and Preparation

189

(3)

How the Microsoft ISA Server 2004 Firewall Works

192

(3)

Filtering Outbound Access

195

(3)

Publishing Internal Resources

198

(2)

Performing Application Filtering

200

(1)

Configuring System Policy Rules

201

(2)

Configuring Client Access Methods

203

(2)

Caching Web Data

205

(2)

Microsoft ISA Server 2004 Checklist

207

(1)

Summary

207

(2)

Where Firewalls Fit in a Network

209

(18)

Different Types of Office Requirements

209

(2)

Central Office

209

(1)

Remote Office

210

(1)

Single-Firewall Architectures

211

(2)

Internet Firewall with a Single DMZ

211

(1)

Internet Firewall with Multiple DMZs

211

(1)

Internet-Screening Firewall (No DMZ)

212

(1)

Dual-Firewall Architecture

213

(1)

The Firewall System

214

(3)

Single-Firewall System

215

(1)

Dual-Firewall System

216

(1)

Where Personal/Desktop Firewalls Fit in a Network

217

(1)

Where Application Firewalls Fit in a Network

218

(1)

Firewalls and VLANs

219

(2)

Virtual Firewalls

221

(1)

Using Firewalls to Segment Internal Resources

221

(3)

Protecting Sensitive Internal Resources

222

(1)

Protecting from WAN or Remote-Access Requests

222

(1)

Protecting Individual Internal Resources

223

(1)

Be Realistic When Implementing Internal Firewalls

223

(1)

High-Availability Firewall Designs

224

(1)

Summary

225

(2)

Part III Managing and Maintaining Firewalls

227

(112)

Firewall Security Policies

229

(24)

Written Security Policies

229

(10)

The Difference Between Policies, Standards, Guidelines, and Procedures

231

(1)

Security Policy Format

232

(1)

Common Security Policies

232

(1)

Management-Access Policy

233

(1)

Filtering Policy

233

(1)

Routing Policy

234

(1)

Remote-Access/VPN Policy

234

(1)

Monitoring/Logging Policy

235

(1)

DMZ Policy

235

(2)

Generally Applicable Policies

237

(1)

Firewall Security Policy

237

(1)

Firewall Physical Integrity

237

(1)

Firewall Static Configuration

238

(1)

Firewall Dynamic Configuration

238

(1)

Network Traffic through the Firewall

239

(1)

Firewall Policies/Rulesets

239

(12)

Ingress Filters

240

(1)

A Systematic Approach to Ingress Filtering

241

(1)

Access from the Internet to a DMZ Segment

242

(2)

Access from a DMZ Segment to an Internal Segment

244

(1)

Access from the Internet to an Internal Segment

245

(1)

Egress Filters

245

(1)

Implementing an Egress Filter for Internal Traffic

246

(1)

Implementing an Egress Filter for a DMZ

247

(1)

Management-Access Ruleset

247

(1)

Telnet and SSH

248

(1)

SNMP

249

(1)

Syslog

249

(1)

TFTP and FTP

250

(1)

HTTP and HTTPS

250

(1)

Proprietary Management Methods

250

(1)

Summary

251

(2)

Managing Firewalls

253

(24)

Default Passwords

253

(1)

Maintaining the Underlying Platform

254

(1)

Firewall Management Interface

255

(5)

Managing Firewalls with a CLI

255

(1)

Managing Firewalls with a GUI

256

(4)

Interface Preference

260

(1)

Management Access

260

(2)

In-Band Management

260

(1)

Out-of-Band Management

260

(1)

Telnet vs. SSH

261

(1)

HTTP vs. HTTPS

262

(1)

Common Firewall Management Tasks

262

(13)

Initial Configuration

262

(1)

Interfaces

262

(1)

Routing/Gateway

263

(1)

Logging

264

(2)

Modifying the Configuration

266

(10)

Change Control

276

Change-Control Logging

271

(2)

Updating the Firewall Software

273

(1)

Choosing the Correct Version

273

(1)

Reading the Release Notes

274

(1)

Defects and Bugs

274

(1)

Summary

275

(2)

What Is My Firewall Telling Me?

277

(24)

Firewalls and Logging

277

(8)

The Syslog Protocol

278

(4)

Syslog Security Deficiencies

282

(1)

Proprietary Logging Methods

283

(1)

Why Logging Is Important

284

(1)

Improved Network Administration, Troubleshooting, and Debugging

284

(1)

Establishing a Baseline

284

(1)

Determining the Health of the System

285

(1)

Intrusion Detection and Incident Containment

285

(1)

Performing Forensic Analysis

285

(1)

Firewall Log Review and Analysis

285

(10)

What to Look for in Firewall Logs

286

(1)

Authentication Allowed

287

(1)

Traffic Dropped (Not Addressed to the Firewall)

287

(1)

Firewall Stop/Start/Restart

287

(1)

Firewall Configuration Changed

287

(1)

Interface Up/Down Status Changed

288

(1)

Administrator Access Granted

288

(1)

Connection Was Torn Down

288

(1)

Authentication Failed

289

(1)

Traffic Dropped (Addressed to the Firewall)

290

(1)

Administrator Session Ended

290

(1)

Cisco Secure PIX Firewall Syslog Event Baseline

290

(5)

Firewall Forensics

295

(4)

The Value (or Not) of IP Addresses

296

(2)

Deciphering Port Numbers

298

(1)

Securing the Firewall

298

(1)

Summary

299

(2)

Troubleshooting Firewalls

301

(22)

Developing a Troubleshooting Checklist

301

(9)

Step 1: Verify the Problem Reported

302

(1)

Step 2: Test Connectivity

303

(1)

Using Ping to Test Connectivity

303

(2)

Testing Connectivity Without Using Ping

305

(1)

Step 3: Physically Check the Firewall

306

(1)

Step 4: Check for Recent Changes

306

(1)

Step 5: Check the Firewall Logs for Errors

307

(1)

Step 6: Verify the Firewall Configuration

308

(1)

Step 7: Verify the Firewall Ruleset

308

(1)

Step 8: Verify That Any Dependent, Non-Firewall-Specific Systems Are Not the Culprit

309

(1)

Step 9: Monitor the Network Traffic

309

(1)

Basic Firewall Troubleshooting

310

(6)

Troubleshooting Connectivity Through the Firewall

310

(2)

Step 1: Verify the Problem

312

(1)

Step 2: Test Connectivity

312

(1)

Step 3: Verify That the Remote Application Is Running and Accessible Locally

313

(1)

Step 4: Check for Recent Changes

313

(1)

Step 5: Review the Firewall Ruleset

314

(1)

Step 6: Review the Firewall Translation Configuration

314

(1)

Step 7: Check the Firewall Logs for Errors

315

(1)

Step 8: Verify the Firewall Configuration

315

(1)

Step 9: Monitor Network Traffic

315

(1)

Troubleshooting Connectivity to the Firewall

316

(1)

Advanced Firewall Troubleshooting

316

(1)

Troubleshooting Example

316

(4)

Summary

320

(3)

Going Beyond Basic Firewall Features

323

(16)

Content Filtering

323

(3)

Implementing a URL Filter

323

(3)

Maintaining URL Filters

326

(1)

What to Do If . . .

326

(1)

Performing Application Filtering

326

(5)

Applications That Are Hard to Firewall

327

(1)

Web Applications (XML, SOAP, WSDL, CGI)

327

(3)

Simple Mail Transport Protocol

330

(1)

Intrusion Detection and Prevention

331

(1)

Overview of IDS

331

(1)

The Firewall as an IDS Sensor

331

(1)

The Firewall as the IPS

332

(1)

Virtual Private Networks

332

(4)

IPsec VPNs

333

(1)

Authentication Header

333

(1)

Encapsulated Security Payload

334

(1)

IPsec Modes

335

(1)

SSL VPNs

336

(1)

Summary

336

(1)

Endnotes

337

(2)

Part IV Appendixes

339

(2)

Appendix A Firewall and Security Tools

341

(18)

Common Troubleshooting Tools

341

(9)

Determining Reachability

341

(2)

Determining Which Physical Addresses Are Known

343

(1)

Windows-Specific Tools

344

(1)

Linux- and UNIX-Specific Tools

345

(1)

Packet-Analysis Tools

345

(1)

Ethereal

346

(2)

Microsoft Network Monitor

348

(1)

TCPDump

348

(2)

Logging and Log-Analysis Tools

350

(1)

Security-Testing Tools

351

(8)

Port-Scanning Tools

352

(2)

Vulnerability-Scanning Tools

354

(5)

Appendix B Firewall and Security Resources

359

(5)

Firewall-Specific Information

359

(2)

General Security Information

361

(1)

Additional Reading

362

(2)

Index

364

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Firewall Fundamentals

Summary

Author Biography

Table of Contents

Supplemental Materials