firewall Free Interrelated Hint

12 Responses

Stay in touch with the conversation, subscribe to the RSS feed for comments on this post.

1. Oakey says

   Firewall Fundamentals provides what I see as the first clear book in many years on the oldest known protection for the Information Technology field. Authors Wes Noonan and Ido Dubrawsky take the concepts of protection at the basic level and slowly walk the reader through protection and defense from the introduction of threats to the details of advanced firewalls like the Cisco PIX and ASA appliances to Microsoft’s ISA application. While this book may to be advanced in nature, it explains in detail the simple items that make the understanding of Firewalls and their technology important. Even from the goal of the book “…personal and desktop…” where the authors clear state that no level will be untouched does this book make one feel comfortable and unafraid.

   Considering that this is a Cisco Press, book it surprised me that the amount of non-Cisco detail the authors’ included, from Checkpoint and Microsoft ISA in the larger areas to Trend-Micro in the smaller areas. These guys ensured in this book a level of detail and understanding that will guarantee a complete read; even a Security Engineer, like myself who has learned the advanced concepts and deployment methods/reasons for security, gained new insight into the world I work in. For both Noonan and Dubrawsky present the items I sometimes miss, the obvious and clear issues that the regular individuals encounter and need to help them.

   Noonan and Dubrawsky start with the simple items and basic concepts slowly and adding to them while not forgetting the assumed reader. This book is divided into four sections including the Appendixes: The first of the major section as always the Introduction which covers the basics from what a threat is to the difference between a personal (computer) based firewall to a network firewall.

   After the basics are covered the authors’ begin moving into the how of firewall technology from the personal computer to the common home-office like Linksys and finally into the realm of small office and hardware that include the Cisco platforms. While these chapters may appear to focus more on the Cisco Products they do include important other chapters that deal with items like where a firewalls belongs within the network. Within this section of the book we see items as mentioned like the Linksys and Cisco products, but we also see NetFilter and other freeware and pay products including Microsoft’s ISA and Checkpoint mentioned, configured and discussed in detail. Within Chapter 7 the Linux products that are slowly advancing in the industry due to their cost and availability are detailed with the NetFilter product. Flow-charts and diagrams again help to explain not only this product, but the key concepts behind firewall technologies and examples of scripting help individuals learn and understanding what should be occurring with the product.

   Finally the last key section deals with the importance of Managing and Maintenance any Firewall. From policy management to troubleshooting they do not leave anything out. I personally found the chapter entitled “What is My Firewall Telling Me?” very different from what I would expect in a simple how to read the logs chapter. The authors took time to explain the concepts of logging, the importance and different methods to read the log. Again they showed that this is not a book that is Cisco centric on Cisco heavy by using products and screen shots of non-Cisco items like Microsoft and NetIQ.

   What this book is missing is a disclaimer that while published by Cisco Press it is not entirely Cisco Centric and this is a good thing. Yes as many people know Cisco is a large player in the field of networking and information security these author’s do everything to ensure a fair and equal play of the others I have mentioned before. I feel that if you where looking for a book to help anyone with a small or home office environment protect it, this is the book you need. While I found adding it to my collection a positive and enjoyable experience, I can only hope that you will too.

   February 5, 2010, 12:43 pm
2. Thorne says

   Firewalls have gone from a luxury to a necessity in the computer world, and today a thorough understanding of their function and setup is required reading for any serious networker, programmer, or computer operator. Firewall Fundamentals: An Introduction To Network And Computer Firewall Security addresses all issues, providing a through introduction to firewalls, how they protect, up to more advanced TCP/IP protocols and firewall configuration for Linux and other systems. From application proxy firewalls to security policies and rules, Firewall Fundamentals holds it all.

   February 6, 2010, 12:38 am
3. Shore says

   Don’t let the title fool you into thinking the book is only of value to novices. Instead the book goes into unexpected levels of detail while still staying easy to read. I was surprised at how much detail there was. There was a lot more information that I would have expected. I think a wide range of skill levels can still find value in the book as an everyday reference, or to study up on the topic. I would highly recommend this as a vendor-neutral book for your networking collection.

   February 6, 2010, 12:51 pm
4. Ferrari says

   As an IT professional, I know and understand that firewalls are a requirement in today’s computing environment. But as a developer, the details of firewalls are pretty much a black box to me. I was pleasantly surprised with the book Firewall Fundamentals – An introduction to network and computer firewall security by Wes Noonan & Ido Dubrawsky. I actually understood most of it!

   Contents:
   Part 1 – Introduction to Firewalls: Introduction to Firewalls; Firewall Basics; TCP/IP for Firewalls
   Part 2 – How Firewalls Work: Personal Firewalls – Windows Firewall and Trend Micro’s PC-cillin; Broadband Routers and Firewalls; Cisco PIX Firewall and ASA Security Appliance; Linux-Based Firewalls; Application Proxy Firewalls; Where Firewalls Fit in a Network
   Part 3 – Managing and Maintaining Firewalls: Firewall Security Policies; Managing Firewalls; What Is My Firewall Telling Me?; Troubleshooting Firewalls; Going Beyond Basic Firewall Features
   Part 4 – Appendixes: Firewall and Security Tools; Firewall and Security Resources; Index

   There were actually a number of surprising aspects to this book (all good). The first thing that surprised me is that this is a Cisco Press book. As such, I would have expected a huge bias towards Cisco technology at the expense of everything else. Yes, most of the options and solutions covered include the Cisco offering in that category. But the overall focus is on the underlying technology instead of the vendor offering. That means that you are getting great information on firewalls, not just how Cisco does it. Another surprising aspect for me was the range of experience that is targeted in the book (and successfully at that). Part 1 was perfect for someone like me who isn’t intimately acquainted with the inner workings of a firewall. Part 2 covers the range of solutions, both hardware and software, personal and enterprise. And Part 3 is one of those sections that you’d likely use on a regular basis at work if you’re responsible for the care and feeding of network security. The information is extremely practical, and having checklists for troubleshooting may just be something that bails you out of some ugly situations…

   There’s not too many books that can pull off the difficult task of reaching all experience levels on a subject. The fact that this book does it while being published under a vendor imprint is even more impressive. Definitely a book I’d recommend on the topic of firewalls…

   February 7, 2010, 1:12 am
5. VanDusen says

   I taught a course in computer security and a course in advanced networking during the spring semester of 2008. Both of those classes contained some coverage of the role of computer firewalls and the techniques they use to protect computers from malicious entities. This was the primary resource I used in my presentations of firewalls and in that context, I found it invaluable.
   There are three main sections:

   *) Introduction to firewalls
   *) How firewalls work
   *) Managing and maintaining firewalls

   For the computer security course, the second section was the most valuable, for in that course we discussed the mechanics of how security is provided on the border of the network with the exterior world. Specifically, chapter 8 “Application Proxy Firewalls” and chapter 9, “Where Firewalls Fit in a Network” were useful.
   The last section was of major importance in the advanced networking course since the emphasis in the course was on network management. I required the students to write a major document on network management policy and the ruleset for managing the firewall(s) was a major section of it. Specifically, chapter 10 “Firewall Security Policies” and chapter 11 “Firewall Policies/Rulesets” were useful.
   This book is an excellent introduction to firewalls and contains enough advanced material for it to be useful for the training of networking professionals.

   February 7, 2010, 12:35 pm
6. McGinnis says

   Awesome product, does what it does the way it should. I recently got 100 mbps cable internet service via Cablevision’s Optimum Online Ultra and I needed a gigabit router, so I bought the TRENDnet TWG-BRF114. It was $60 at the time, one of the cheaper gigabit routers, so I immediately thought I’d give it a try. I must say it just works. I would recommend it.

   February 8, 2010, 12:33 am
7. Paluch says

   At first install, speeds were capped well below my ISP’s capacity. After upgrading the firmware (which can ONLY be done using I.E. since their code is not compatible with Firefox yeah, major yellow flag!) to v1.0 Revision 04 the speeds were acceptable, however the router disconnects if idle and for some reason you cannot turn that feature off. It also does not return ping requests, there is a serious bug in the firmware that tech support could not overcome after over an hour on the phone and 3 different techs.

   Also there is no way to save the original Revision 02 firmware, and they don’t host it on their site so it can’t be downloaded. Once you upgrade the firmware (as their tech support insists!) there is no way to go back! Their top tier tech support never called back like they said they would. 24/7 tech support my A$$!

   The NAT implementation is horrible, it does let you open port ranges manually but cannot forward them to a specific host on your network without jumping through hoops and creating a “virtual server” why can’t they just do like everybody else does?

   Also you cannot delete or edit “default services” that they bind to certain ports, what if you want to use that port for another application?

   Overall, save yourself the trouble and jog on over to Radio Shack and get something that works, something you can take back within a few minutes rather than have to get an RMA, ship the item, wait for credit, yada yada.

   February 8, 2010, 1:06 pm
8. Iverson says

   First of all it comes with very outdated firmware software. The newer/newest firmware for this router on the Trendnet web site is from 2008. So why does it ship with older software???

   To update the firmware, I tried all the popular browsers (including FireFox) on the MAC and PC and the only browser that worked was IE. Pathetic. This shows a lack of attention to detail.

   So after finally getting the router upgraded, it is time to play with admin interface. The WAN interface only allow up to 100Mbps configuration. The web site clearly advertise 1000Mbps speeds. Apparently it can only do fast ethernet on the WAN port.

   Now I do a speed test on my wireless Airport router. The upspeed clocks in at 0.08Mbps where it before was 5Mbps. It is orders of magnitude slower. I am a network engineer and I know what I am doing. I tried everything, but to no avail. This box will be going back.

   February 9, 2010, 1:13 am
9. Aguilera says

   I did not have any of the problems with this product that Mr. Phillips said he had. He may have purchased a defective unit or his unit may have been incompatable with the rest of his hardware. In my own experience this router is a well-designed product. It is not a Cisco, but at its price, and at $54.56 from Amazon it is a steal, it is a great deal. Its user interface is well laid out and easy to configure for all basic home and small business router applications, save VPN. I contacted Trendnet’s pre-sales department to inquire about the unit’s WAN to LAN throughput before purchasing it, since that particular spec is not in their product literature. They quoted me ca. 60 Mbit/sec with fast ethernet, and ca. 100 Mbit/sec with gigabit ethernet, devices connected. The first figure is consistent with Small Net Builder’s test of Trendnet’s equivalent wireless version of this product, so I think it is trustworth as the same processor is likely used in both units.

   The product makes a nice presentation with its metal case and integrates well with Trendnets gigabit green desktop switches. I am so pleased with it I just placed an order for a second one.

   I have no reservations about recommending this product. Trendnet may not have been esteemed for their home/small business routers in the past, but this product definitely puts them on the map.

   February 9, 2010, 1:15 pm
10. Ju says

    I purchased this router for my company’s network. We moved from our old (non-wired) building to a new (pre-wired) building, so we needed to switch from our old Linksys Wireless router to a new Gigabit Firewall/router. I was a little wary of the price of this unit for Gigabit service, but it has performed like a champ so far (2 months) without a single outage or need to reboot!

    I am very pleased with this little router and would gladly buy from TRENDnet again.

    February 10, 2010, 1:22 am
11. Dirkin says

    Normally, I’m a big fan of Netgear products. However, the FVS336G did not work as advertised. The SSL VPN feature and IPSEC VPN client software do NOT support 64-bit operating systems, and according to Netgear tech support, there are currently no plans to support it in the future. The only workaround offered was to purchase SafeNet’s IPSEC VPN client at $150 per user.

    What a letdown… the primary feature that led us to purchase this device (i.e. the SSL VPN) doesn’t work for us.

    February 10, 2010, 1:16 pm
12. Cho says

    I have tried out a couple different Load balancers and by far this is the least featured one of them all. The biggest issue is that it does NOT load balance. You can park specific traffic to an individual port but it will not dynamically load balance.

    For example you can pin HTTPS to port 1 or two but standard HTTP traffic will also only use a single default port. There is other products out there like SYSWAN, and linksys that actually do TRUE algoithmic load balancing for less money

    If you want to be able to use both lines for one traffic do not buy this product. Go for the SYSWAN which I know for a fact works.

    February 11, 2010, 1:03 am

You must be logged in to post a comment.