Firewalls, IDS & IPS Explained: Network Security Devices Fundamentals

 

HELLO FRIENDS

WELCOME TO MY CYPHER LOG

   We all hear a lot about Firewall in our field and we also know the overview of it but in this blog we are going to know little more than we already knew.
In today's blog we are going to see about the Firewall, IDS and IPS.

Let's dive into it

FIREWALLS

         As we know firewalls work like security guards who monitor the incoming and outgoing network traffic and devices in our systems and whether to block or allow based on the set of security rules.
It had three types they are

PACKET FILTERING FIREWALL

    It will look only at the header of the packet, like IP addresses.
It acts like a security guard who stands in front of our college main gate who would permit us if we have a proper ID card, they won't ask many questions to let us in right because we have an ID card otherwise they won't let us in.
It had a biggest drawback that if an attacker hides a malware inside a legitimate looking packet it won't think twice to block it because it had a legitimate header.

STATEFUL INSPECTION FIREWALL

     It will remember the State of active connections. It knows if a packet is relevant to the conversation or a random one.
To understand it clearly, 
If there is a meeting conducted by the principal of your college for the professor then students won't be allowed to enter there right that's how it works.

NEXT GENERATION FIREWALL

   It is a modern standard of firewall which combines traditional Firewall rules with deep packet inspection.
It won't just check the header to let the packet in, it would analyse the packet payload, like if you went to airports they would check your bags before they let you board the flight.
It works in the application layer which is the 7th layer in OSI model.

IDS and IPS

  Both works like a guard and camera, here the IDS is the camera and IPS is the guard.

IDS [ Intrusion detection system ]

   It monitors network traffic to identify if there is any anonymous behaviour and compares it against a data base of known attack signatures to find a attack, if there is any then they would alert, it can't stop that but it would log everything.

IPS [ Intrusion prevention system ]

    It does everything that IDS does and it is placed directly in the path of the traffic, if it find any anonymous behaviour they would tend to block or drop the packets in real time.
It had a drawback to if it configured too aggressively they can cause false positives which leads to block the legitimate users too.

So that's all guys today's lesson.
I hope you guys understand it well. Stay tuned for future blogs.

If you want to know more about this you can get the study material through this link.

THANK YOU

Comments

Post a Comment

Popular posts from this blog

Day 2: Understanding the CIA Triad, AAA

Image
HELLO FRIENDS!! WELCOME TO MY CYPHERLOG Today I studied the fundamentals of cybersecurity - the CIA Triad and AAA Framework. by journaling this in this blog I pushed myself to be stay productive  it's really motivating me!! Let me break down what I learned in simple terms.   At first I have started with CIA Triad and AAA Framework actually this the basic foundation of cybersecurity so we need to understand it well to master it, as you thing its not an complicating topics because I too thought that, its just an simple topic which we can easily connect with our daily life, so let me explain it clearly. THE CIA TRIAD    CIA Triad is nothing but a combined term of three words which is CONFIDENTIALITY, INTEGRITY AND AVAILABILITY and we can call it as an three pillars of cybersecurity so let see how it is more important in cyber. CONFIDENTIALITY  CONFIDENTIALITY is, if you are authorized to the system or data like we can take our mobile or laptop as an example you're ...
Read more

Cryptography Basics: Encryption Types & Hashing Explained

Image
 HELLO FRIENDS WELCOME TO MY CYPHER LOG         Today I came up with a topic which I wondered about what it will be from the first year of my studies in cybersecurity, The cryptography.  In this blog we are going to un-wrap this topic and learn more about it. LETS GET INTO THE TOPIC CRYPTOGRAPHY     You may think that it can be difficult to learn but actually there's nothing like that because I too thought like that about this, if you still think it's difficult I will explain it Like you want.    Cryptography is encrypting data from a readable plain text to unreadable cipher text format. Cryptography is like a knife It has both advantages and disadvantages. Its purpose varies based on who uses it, if you want to use it to protect data it can keep it secure, On the other hand if an attacker uses it he can create a massive bad impact like implement the attack the ransomware. THE TWO MAIN TYPES OF CRYPTOGRAPHY     As I have mentio...
Read more

Cyber Security Day 4: Understanding Layered Security & Defence in Depth

Image
HELLO FRIENDS!! WELCOME TO MY CYPHER LOG Successfully I have learned continuously for three days without any procrastination and I am just feeling proud of myself,  I hope you guys too learn continuously without any distractions. Ok let's see what I have learned today,    In the last blogs we have seen about security controls in this blog we are going to dive into depth of defence in cyber security and also there is an architecture called zero trust, let's see how it works. Defence in depth    Security controls are just a single safety measure to prevent an attack but defence in depth are not like that as we can understand with the name itself it's controlling structure which will protect the asset from an attack layer by layer. And it has five layers.  If a company hosts a website they won't just rely on a single layer of security like five layers of controls Layer 1 is an external firewall that will automatically block the IP address which looks suspiciou...
Read more