CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Firewalls

March 12, 2010 · Posted in Don's eBook Report, InfoSec Docs, Information Security, Information Systems, Information Technology 

Firewalls

Packet Filtering Firewall – First Generation

  • Screening router
  • Operates at Network and Transport Level
  • Examines Source and Destination IP address
  • Can deny based on ACLs
  • Can specify port

You may also want to consider these CISSP resources from Amazon.com

Planning to take the CISSP Exam?

Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00.

Click the Add To Cart Button to Purchase

Click the Add To Cart Button to Purchase

Plus you will also get copies of notes from other CISSPs.

Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM.

CLICK BELOW TO MAKE YOUR PURCHASE NOW.

All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order.

IMPORTANT NOTICE:

I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS.

Application Level Firewall – Second Generation

  • Proxy server
  • Copies each packet from one network to the other
  • Masks the origin of the data
  • Operates at layer 7 (application Layer)
  • Reduces network performance since it has to analyze each packet and decide what to do with it
  • Also called Application Layer Gateway

Stateful Inspection Firewalls – Third Generation

  • Packets analyzed at all OSI Layers
  • Queued at the network level
  • Faster than the Application Layer Gateway

Dynamic Packet Filtering Firewalls- Fourth Generation

  • Allows modification of security rules
  • Mostly used for UDP
  • Remembers all of the UDP packets that have crossed the network’s perimeter, and it decides whether to enable packets to pass through the firewall

Kernel Proxy – Fifth Generation

  • Runs on NT Kernel
  • Uses dynamic and custom TCP/IP-based stacks to inspect the network packets and to enforce security policies

You may also want to consider these CISSP resources from Amazon.com

Bookmark and Share

Thought you should know, etc... Update

Sony Turning to Medical-Imaging Chips

Equipment that exploits an edge in disease-detecting technologies could revive Sony, says incoming Chief Executive Officer Kazuo Hirai

Google Testing New Gadget

Google is working on a new entertainment device that will rely on wireless networking, according to a FCC filing

Intel Antitrust Suit to Be Dropped in N.Y.

New York has ended its more than two-year-old antitrust suit against Intel without imposing any fines or restrictions

U.S. Air Force May Buy 18,000 Apple IPad 2s for Flight Crews

The U.S. Air Force may buy as many as 18,000 iPad 2s in what would be one of the military’s biggest orders of computer tablets, accelerating Apple Inc.’s inroads into the federal government.

TomTom Rises After Rabo Raises Recommendation: Amsterdam Mover

TomTom NV, Europe’s biggest maker of portable navigation devices, rose to the highest in seven months after Rabo Securities raised its recommendation, citing strong automotive sales and a potential Apple Inc. mapping deal.

Tags: , , , , , , , , , , , ,

Comments

Leave a Reply




  • Your Shopping Cart

    Your cart is empty

  • Calendar

    March 2010
    M T W T F S S
    « Feb   Apr »
    1234567
    891011121314
    15161718192021
    22232425262728
    293031  

  • RSS From the National Vulnerability Database

    • CVE-2011-3958 (chrome) February 7, 2012
      Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. […]
      nvd@nist.gov
    • CVE-2012-1033 (bind) February 7, 2012
      The resolver in ISC BIND 9 through 9.8.1-P1 does not properly implement a cache update policy, which allows remote attackers to trigger continued resolvability of domain names that are no longer registered via an unspecified "Ghost Names exploit." […]
      nvd@nist.gov
    • CVE-2011-3971 (chrome) February 7, 2012
      Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events. […]
      nvd@nist.gov
    • CVE-2011-3954 (chrome) February 7, 2012
      Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage. […]
      nvd@nist.gov
    • CVE-2011-3970 (chrome, libxslt) February 7, 2012
      libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. […]
      nvd@nist.gov
    • CVE-2012-0926 (realplayer, realplayer_sp) February 7, 2012
      The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream. […]
      nvd@nist.gov
    • CVE-2011-3969 (chrome) February 7, 2012
      Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents. […]
      nvd@nist.gov
    • CVE-2011-3956 (chrome) February 7, 2012
      The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension. […]
      nvd@nist.gov
    • CVE-2011-3968 (chrome) February 7, 2012
      Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences. […]
      nvd@nist.gov
    • CVE-2012-1035 (ada_web_services) February 7, 2012
      AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. […]
      nvd@nist.gov
Get Adobe Flash playerPlugin by wpburn.com wordpress themes