What is a Firewall, and Why Does It Matter?
Hearing โfirewallโ in the context of computing can be confusing. How does a wall designed to mitigate the impact of a building fire apply to computers?
Well, imagine the rescue team using heavy blasts of water to save the day. A hacker is as motivated to get at your data. They will try everything to bypass your security. They want to get inside your network perimeter. In a business office, computers and printers are often networked together. This lets Jane in accounting and Kevin in graphic design access the same business tools.
In computing, a firewall sits between that internal network and the internet outside. Itโs kind of like a nightclub bouncer. You definitely want it to be as burly and intimidating as possible to keep the riff-raff out. The firewall helps reduce or prevent unwanted traffic from getting through.
The Packet Filtering Firewall Approach
Your firewall can be hardware, software, or both. A packet-filter firewall monitors and controls network traffic. It filters data entering the network according to predetermined rules. IT experts set up a firewall to examine small amounts of data (called โpacketsโ) to see if they contain threats. It checks packet data against criteria such as allowed IP addresses and packet type. If the data is suspect, the firewall stops those packets. If not, the data will continue on to its destination.
Firewalls stop certain software from sending and receiving data to and from the internet. This reduces the number of entry points for viruses or illegitimate traffic. After all, a club wouldnโt want to hire an army of bouncers to cover multiple entrypoints.
A firewall also monitors outgoing traffic. Whyโs that? Because an infected computer in your network could be sending out malicious information. If your company has fallen victim to a malware attack that turns a computer into a bot, it might be โphoning home.โ
Often, malware will communicate with a central โZombie masterโ server to share sensitive data or await further instruction. This information is often used to strengthen the bad guyโs ability to attack victims.
Firewalls can help prevent denial-of-service (DoS) attacks. In a DoS incident, thousands of computers are used to send an overwhelming amount of traffic to a network. Itโs like putting 10,000 people in an elevator with an occupancy limit of 20 โ expect a crash.
One famous 2016 attack seriously disrupted Amazon, Visa, PayPal, Netflix, AirBnB, and more.
Other Types of Firewall
Packet-filtering firewalls arenโt your only option. Stateful inspection is helping to make firewalls even smarter. These check where the packet came from, where it is going, and what application requested it. This end-to-end examination is more rigorous. All the parameters must match specific criteria for the packet to pass through. This approach offers a smart, fast way to inspect for unauthorized traffic.
When setting up any firewall, it is important to avoid any unintentional openings. A hole in a chainlink fence renders perimeter security useless. A hole in a firewall leaves your network vulnerable.
Need help deciding on the right type of firewall for your business? Want to be sure your firewalls are going to withstand the next attack?
Our experts can help set up and test your firewalls. Contact us today at (615) 522-0080!
Safe Network Solutions is a technology consulting firm located in Nashville, TN. We are focused on reducing our Clientsโ stress and the time they spend handling IT related issues. As technology has become more integrated with daily business tasks, downtime is not an option. Whether your systems reside on-premise, in the cloud, or in a hybrid setup, you need a partner with expertise in a wide array of technologies, with a security focus.
