MICROSOFT WINDOWS FIREWALL
Firewall
A windows firewall is a network security system which is used to check and act in giving permission or denying traffic by use of policies defined explicitly. However, this action can be done by use of only a single device or several devices or even a software which runs on the single device to be used as a server.
Firewall security techniques
Firewall security techniques are those actions when businesses are threatened they are used to secure their firewall management programs. Consequently, these security techniques are constructed to stop the spread of a fire, they block some kind of traffic, by creating a barrier between a trusted and untrusted networks as well as stopping computers from being attacked.
Strengths
- imitate the same source IP address then the Access Control Lists will allow.
- Sometimes the communications of IPv4 can be delayed. Whenever the administrator has a better knowledge of network, it is easy to apply additionally, there is usually a layer which secures and hide the addresses of the original font and the terminus.
- Firewall can be constructed on nearly all the routers.
- Preventing the IPv4 address from being consumed.
- It has very little impacts on the performance of the network.
Weaknesses
- When there is a large amount of Access Control Lists (ACLs), the maintenance is so difficult.
- The Access Control Lists (ACLs) uses IP address when filtering, but if one
- Network applications and some technologies may not operate.
The methodologies that windows firewall uses
- Static package filtering this is a firewall technique which is used to prevent the basis of source IP address from being accessed and also destination IP address as well as the source number. All these are prevented through the static package filtering technique. Identically, the techniques used works on layer 3 and layer 4 of the OSI model.
- Stateful package filtering- Mainly, this technique is used when a session is instituted in a trusted network. Here, source and destination IP address, destination port and also the other layer information are recorded. When this technique is applied, through default, all the traffic coming from the untrusted network is declined. Also, by so doing replies of this session are accepted only if the IP addresses and the port numbers are exchanged.
- Proxy firewalls- The techniques are also called application-layer firewalls. Importantly, proxy firewalls techniques are applied, there usually no direct connection between the original client and the server because proxy firewalls are used as the interceder between the two. However, a client who tries to establish a connection directly to the server for communication also has to connect with the proxy server. Notably, this is where the proxy server connects with the server in the place of a client. Moreover, the client can send data to the proxy server, then to the server. A proxy server can operate to layer 7.
- Transparent firewall- Through the use of default, this firewall works at layer 3 where the benefit of using it is that it can also work at layer 2. Consequently, this technique has two interfaces which are used as a bridge and so it can be changed to a single IP address. Therefore, the users of this network do not know whether the fireworks exist. Transparent firewall can also be used to build a stateful database and also the application inspection.
Reference
https://www.geeksforgeeks.org/firewall-methodologies/. (2017, august 14th). Retrieved from GeeksforGeeks: saurabhsharma56
https://www.secureworks.com/blog/firewall-security. (2016, November Tuesday). Retrieved from Secureworks: Webopedia