Firewalls

  1. Firewall Architectures and Network Design
    1. Single Firewall Architectures
      1. Bastion Host
        1. Definition and Purpose
          1. Security Hardening Requirements
            1. Network Placement
            2. Screened Host Architecture
              1. Single Firewall Deployment
                1. Traffic Flow Patterns
                  1. Security Considerations
                  2. Dual-Homed Host Architecture
                    1. Two-Interface Configuration
                      1. Traffic Mediation
                        1. Isolation Benefits
                      2. Multi-Firewall Architectures
                        1. Screened Subnet Architecture
                          1. DMZ Implementation
                            1. Three-Zone Design
                              1. Traffic Flow Rules
                              2. Firewall Sandwich
                                1. Multiple DMZ Zones
                                  1. Layered Security Approach
                                    1. High-Security Environments
                                  2. Demilitarized Zone Design
                                    1. DMZ Purpose and Benefits
                                      1. Service Isolation
                                        1. Attack Surface Reduction
                                          1. Internal Network Protection
                                          2. Common DMZ Services
                                            1. Web Servers
                                              1. Mail Servers
                                                1. DNS Servers
                                                  1. FTP Servers
                                                  2. DMZ Traffic Flow Rules
                                                    1. Internet to DMZ
                                                      1. DMZ to Internal Network
                                                        1. Internal Network to DMZ
                                                      2. Internal Network Segmentation
                                                        1. Security Zone Creation
                                                          1. Network Segmentation Strategies
                                                            1. VLAN Implementation
                                                              1. Subnet Isolation
                                                              2. Microsegmentation
                                                                1. Zero Trust Principles
                                                                  1. Application-Level Segmentation
                                                                    1. East-West Traffic Control
                                                                    2. Lateral Movement Prevention
                                                                      1. Network Access Control
                                                                        1. Privilege Escalation Prevention
                                                                          1. Threat Containment

                                                                      Previous

                                                                      4. Types of Firewalls by Deployment Model

                                                                      Go to top

                                                                      Next

                                                                      6. Firewall Rules and Policies