What A Firewall Will Do And What A Firewall Will Not Do
- 1
- Add a Comment
There are two categories of firewalls: software-based and hardware-based. A software-based firewall, such as the Windows Firewall included with Vista, is more designed to protect a single computer connected to the Internet. A hardware-based firewall, on the other hand, is geared towards protecting an entire network of computers that are connected to the Internet. The best security though, is achieved when both options are used in combination.
Once a firewall solution is in place, people often think that they are safe from al types of attacks. This is not the case at all. Even when you implement a combination of firewalls, the solution still has limitations.
- A firewall does not protect you from attacks and threats from within your network. As hard as it may be to believe, many attacks that do occur, are the result of a malicious user on your own network.
- A firewall provides limited protection against viruses. To protect your network from virus attacks, computers must also be running anti-virus software.
- A firewall does not protect a network from employee error and carelessness. Unfortunately, even the smallest error inadvertently made by an employee can wreak havoc on your network. Only policies, procedures, guidelines, and employee training can prevent these types of issues.
- Finally, there are attacks that can avoid a firewall - such as a hack using a dial-up account. Unfortunately, in these situation, a firewall provides no protection.
- Seagate FreeAgent Go for Mac 320 GB USB 2.0 and FireWall 800 Portable External Hard Drive with Doc ST903203FJA105-RK (Silver)
- eTrust Internet Security Suite & FREE UltraCord 13-Piece Travel Kit
- The Book of PF: A No-Nonsense Guide to the OpenBSD Firewall
- Secure Your Network for Free
- Design of a Load-Balancing Architecture For Parallel Firewalls
- Panda Antivirus + Firewall 2008 3-User

One Comment
Dodutils
June 19th, 2009
at 12:12pm
HI,
The title of the article is what FW can do and cannot, but I see no “can” details only “cannot”.
You also miss to describe difference between a basic hardware FW that do simple network communication filtering (and usually the first task you ask to a FW is also to take care of NAT/PAT).
You say FW has very limited protections, this is not totally true, many hardware FW include IDS and/or Anti-Virus and/or Anti-spam in same box, only the price will make the difference.
About the difference between a software FW and hardware FW…in fine, they are all software, the only difference is that you have computer box (usually running Linux) running a pre-configured FW software (plus optionnal extra protection software, IDS, Anti-virus, Anti-Spam), and this computer come with I/O interfaces dedicated to its job, so it usually have more network connectors than a personnal computer, but no sound input/output, no HDMI…
I would rather say “Personnal FW” and “Dedicated FW machine”.
regards.