Firewalls

5.

Firewall Architectures and Network Design

5.1.

Single Firewall Architectures

5.1.1.

5.1.1.1.

Definition and Purpose

5.1.1.2.

Security Hardening Requirements

5.1.1.3.

Network Placement

5.1.2.

Screened Host Architecture

5.1.2.1.

Single Firewall Deployment

5.1.2.2.

Traffic Flow Patterns

5.1.2.3.

Security Considerations

5.1.3.

Dual-Homed Host Architecture

5.1.3.1.

Two-Interface Configuration

5.1.3.2.

Traffic Mediation

5.1.3.3.

Isolation Benefits

5.2.

Multi-Firewall Architectures

5.2.1.

Screened Subnet Architecture

5.2.1.1.

DMZ Implementation

5.2.1.2.

Three-Zone Design

5.2.1.3.

Traffic Flow Rules

5.2.2.

Firewall Sandwich

5.2.2.1.

Multiple DMZ Zones

5.2.2.2.

Layered Security Approach

5.2.2.3.

High-Security Environments

5.3.

Demilitarized Zone Design

5.3.1.

DMZ Purpose and Benefits

5.3.1.1.

Service Isolation

5.3.1.2.

Attack Surface Reduction

5.3.1.3.

Internal Network Protection

5.3.2.

Common DMZ Services

5.3.2.1.

5.3.2.2.

5.3.2.3.

5.3.2.4.

5.3.3.

DMZ Traffic Flow Rules

5.3.3.1.

Internet to DMZ

5.3.3.2.

DMZ to Internal Network

5.3.3.3.

Internal Network to DMZ

5.4.

Internal Network Segmentation

5.4.1.

Security Zone Creation

5.4.1.1.

Network Segmentation Strategies

5.4.1.2.

VLAN Implementation

5.4.1.3.

Subnet Isolation

5.4.2.

Microsegmentation

5.4.2.1.

Zero Trust Principles

5.4.2.2.

Application-Level Segmentation

5.4.2.3.

East-West Traffic Control

5.4.3.

Lateral Movement Prevention

5.4.3.1.

Network Access Control

5.4.3.2.

Privilege Escalation Prevention

5.4.3.3.

Threat Containment

Previous

4. Types of Firewalls by Deployment Model

Go to top

Next

6. Firewall Rules and Policies