Ne721NE7212 CASE STUDY NETWORK PROTOCOL AND SECURITY IMPLEMENTATION(Team Work)

NE7212 CASE STUDY

C.Namasivayam. DCT, B.E, M.E (Network Engineering).

Dhanalakshmi Srinivasan Engineering College

[email protected]

https://www.facebook.com/namasivayam.cse

http://menetworkengineering.blogspot.in/.

What is Firewall

• Firewall is a software or hardware-based network security system

• Protect our inside network from outside world internet.

• Controls the incoming and outgoing network traffic

• Analyzing the data packets and determining whether they should be allowed through or not.

• Computer operating systems include software-based firewalls to protect against threats from the public Interne.

• Many firewalls can perform basic routing functions

TYPES OF FIREWALL

Desktop Firewall

• Protect internal host or node

• Software Firewall

Network Firewall

• Protect our entire network from outside internet

• Hardware and Software Firewall

Firewall Basics Functions

• Add your first bullet point here

• Add your second bullet point here

• Add your third bullet point here

Best Firewall in the Market

• Checkpoint Software Technologies

• Cisco Systems

• Fortinet

• Juniper Networks

• Mcafee

• Watchguard

Cisco ASA Firewall

• Adaptive Security Appliance (ASA).

• The best firewall in the market.

• Java Based Firewall.

• CLI and GUI Based Firewall.

• Combines firewall, antivirus, intrusion prevention, and virtual private network (VPN).

• Packet Filtering firewall.

CISCO ASA Firewall Features:

• Antivirus

• Anti spam

• URL Filtering

• VPN device

• SSL device

• Content inspection

CISCO ASA 5520 model Firewall

System/Software Requirements

• GNS3 (Graphical Network Simulator 3) http://www.gns3.net/

• GNS3 is an open source software that simulate complex networks while being as close as possible to the way real networks perform

• Without having dedicated network hardware such as routers and switches.

• Provides an intuitive graphical user interface to design and configure virtual networks.

Continue

• Cisco asa842-initrd.gz

• Cisco asa842-vmlinuz

• Cisco asdm-715.bin

• Tftpd32 Server

• Web Server

• Microsoft Loopback Adapter

• One Cisco Router

• Oracle Virtual Box

CISCO ASA Firewall Access Modes

Unprivileged Mode

• This Mode provides restricted views of the security appliance.

• Cannot configure anything from this mode.

• The enable command used in this mode.

ciscoasa>enable Unprivileged Mode

Password: Initially its Blank

ciscoasa# Privileged Mode

Continue

Privileged Mode

• Displays the # prompt.

• Unprivileged commands also works in this mode.

• Cannot configure anything in this mode.

• Access the configuration mode using the #configure terminal command from the Privileged mode.

ciscoasa#configure terminal Privileged Mode

ciscoasa(config)# Configuration Mode

Continue

Configuration Mode

• Displays the (config)# prompt

• Change all system configuration in this mode.

• The mode some times called Global Configuration Mode.

ciscoasa(config)#interface GigabitEthernet0/1 Configuration Mode

ciscoasa(config-if) Configure interface specific parameters

Firewall Security Level Interfaces

• Security Level 0 Outside Interface (INTERNET)

• Security Level 1 to 99 Management Interface ( DMZ)

• Security Level 100 Inside Interface (LAN)

Firewall Interface security levels.

Rules For Traffic Flow Between Security Levels

1. Traffic from Higher Security Level to Lower Security Level

• Allow all Traffic from higher security levels unless specifically

restricted by an Access Control List(ACL).

• nat/global Translation pair between High-to-Low Security Level

Interface.

Continue

2. Traffic from Lower Security Level to Higher Security Level.

• Drop All Traffic unless specifically allowed by an ACL.

• Static NAT between High-to-Low Security Level Interface

Continue

3. Traffic Between interface with same security Level

• By default this is not allowed.

• Unless you configure the same-security-traffic permit command.

NETWORK TOPOLOGY

Thank you

• C.Namasivayam, DCT, B.E, M.E (Network Engineering).

• Department of IT,

• Dhanalakshmi Srinivasan Engineering College Perambalur,

• E.mail id : [email protected]

• Cell No: +91-9626319896

• Facebook : https://www.facebook.com/namasivayam.cse

• Blogspot : http://menetworkengineering.blogspot.in/

Thank you

• C.Namasivayam, DCT, B.E, M.E (Network Engineering).

• Department of IT,

• Dhanalakshmi Srinivasan Engineering College Perambalur,

• E.mail id : [email protected]

• Cell No: +91-9626319896

• Facebook : https://www.facebook.com/namasivayam.cse

• Blogspot : http://menetworkengineering.blogspot.in/