Basic HTML version of Foils prepared July 6 99

Foil 72 Firewalls (4)

From Security Infrastructure fo Electronic Commerce and Internet CPS714 Computational Science Information Track -- June 2 and June 7 99. by Roman Markowski


Gauntlet Firewall 2.0 for Windows NT from Network Associates (http://www.nai.com)
FireWall-1 for Windows NT from Check Point Software Technologies (http://www.checkpoint.com)
Firewall policy:
  • must support without internal client modifications: telnet, FTP, e-mail (SMTP out, POP3 in), HTTP, HTTPS, NNTP, IRC, RealAudio
  • ICMP (ping, traceroute) allowed from internal host outside; firewall should prevent ping and traceroute from outside
  • Telnet and FTP allowed inbound with strong authentication
  • secure remote administration allowed
  • firewall must prevent IP spoofing attempts
  • the firewall needs logging and reporting mechanisms



© Northeast Parallel Architectures Center, Syracuse University, npac@npac.syr.edu

If you have any comments about this server, send e-mail to webmaster@npac.syr.edu.

Page produced by wwwfoil on Tue Jul 6 1999