Secure a network perimeter

Question

How can you secure a network perimeter? Be ensure to discuss all three of the basic access points into most networks, as well as the different types of firewalls commonly used today.

Answer 1

Whenever you set up any network the first and foremost concern is the security of the network from external intruders at the perimeter of your network. There are three basic and most vulnerable access points into most networks where lies the biggest insecurity for the network:

1. Internet (70% organizations experienced an attack from the internet)
2. LANs (30% attacks are through LANs and ANs)
3. WANs (30% attacks are through LANs and ANs)

Most of the external intruders use internet connections where as the internal intruders use LANs and WANs to attack the network. As internet is the biggest source of such attacks today the focus of perimeter security is on internet connections, although the physical security is also important.

1. Firewalls are the most commonly implemented perimeter types of network security devices. A firewall can be a hardware device or a software application and generally is placed at the perimeter of the network to act as the gatekeeper for all incoming and outgoing traffic. The four mechanisms are circuit-level gateway, packet-filtering, proxy server and application gateway.

Some of the popular firewalls used today are:

Comodo Firewall Pro: This firewall claims to provide the highest levels of security against inbound and outbound threats through its latest technologies:

Free Personal Firewalls:

•    Kerio
•    Outpost Firewall
•    Zone Alarm Free

Commercial Personal Firewalls:

• Black Ice
• McAfee Personal Firewall
• Norton Person Firewall
• Outpost Firewall Pro
• Tiny Personal Firewall
• Zone Alarm Pro/Plus

2. Another important part of perimeter security is the implementation of encryption and protocols to protect the wireless network from unauthorized access.

3. An important element to prevent unauthorized user from accessing the internal LAN and WANs is physical security. Computers can contain locks on their power switches or passwords that disable the screens and keyboards. The rooms should have proper security and control mechanisms so that only authorized personnel should enter the protected area.