Join the Discord Server!
  / discord  
---------------------
MY FULL CCNA COURSE
📹 CCNA - https://certbros.teachable.com/p/cisc...

FREE CCNA FLASHCARDS
🃏 CCNA Flashcards - https://certbros.com/ccna/flashcards

HOW TO PASS THE CCNA
📚 Get a great book - https://amzn.to/3f16QA5
📹 Take a video course - https://certbros.teachable.com/p/cisc...
✔ Use practice exams - https://www.certbros.com/ccna/Exsim

SOCIAL
🐦 Twitter -   / certbros  
📸 Instagram -   / certbros  
👔 LinkedIn -   / certbros  
💬 Discord - https://www.certbros.com/discord

Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------

So first, what is a firewall?

Now while most of the word is full of good-intentioned trustworthy people, there are a huge number of bad guys out there that want to take down your systems and get their hands on your hard-earned money!

With routers generally having minimal security features, you can quickly be at the mercy of the attackers.

This is where firewalls come in. Firewalls are designed to shield and protect our trusted networks from the untrusted.

The idea is that a firewall will block all the bad traffic from the attackers.
While at the same time, allow normal flow for the good traffic.

Most firewall, by default, block everything!

It doesn't matter if its traffic leaving the network or traffic entering the network. Everything is blocked.

The way we allow traffic to pass the firewall without being block is by adding firewall rules.

Next-gen firewalls take the same methods but then enhances them with more in-depth security features.

Generally speaking, this is what a next-generation firewall should include.

Application Level Inspection: So the firewall can identify and block risky application traffic.

Intrusion Prevention Systems or IPS: IPS will inspect the contents of the traffic and look for patterns or signatures of malicious or malware related traffic.

External Threat Intelligence: Next-generation firewalls can update themselves from external threat intelligence sources.

Computers can also have software-based firewalls. For example, the windows firewall is built-in and uses the same rule-based methods. Such as port, destination, and source IP addresses.

Having a firewall both on the network and the endpoints is important when creating a layer security posture.

#ccna #cisco #networking