If your practice is be joineded to...

If your practice is be joineded to the Internet, you should have a firewall-plain and simple. Having an Internet connection without a firewall is like leaving your brass door unlocked when you advance to bed at night. Actually, it could be flat worse.

Why do I ne a firewall?

When it advances to theft, the variety of risk in the cyber-world is often higher than in the physical common In the physical world, the thieves you must fortify yourself from generally live right in your neighbourhood. nevertheless in the cyber-world, everyone is your neighbour, and thieves (hackers) can, and do, advance knocking anytime they like. As you work away happily at your PC you could be getting hacked without equable knowing it.

What are the risks?

Over half of the businesses have relationed to the Internet have no firewall protection whatsoever. In the case of small businesses, that number is calm higher. Why? The most frequent answer is that business owner/ operators don't really understand the risk they're taking by means of not installing a firewall.

The first big mistake made by dint of uneducated business owners is to think hackers know who they arc and/or care about the information forward their systems. Instead, hackers are usually merely looking for bandwidth, storage capacity, and processing power.

Once they've penetrated your scheme using a known exploit (a security cavern in an operating system that has not at the same time had a patch issued to correct it), hackers can install spyware (see Web Works, October 2003) to procure all your passwords. And one time they have your passwords, hackers "own" your network and can do whatever they want. As a issue you could see your storage quickly fill up your network and server inactive down considerably (or crash altogether), and your bandwidth bill proceed through the roof.

Hardware v software

Once you ve made the decision to bribe a firewall, there are several things to consider. For instance, should you purchase firewall hardware or software?

As a method firewall hardware is better than firewall software. A hardware firewall is a stand-alone appliance that's not hanging on Microsoft's operating systems.

Why does this matter? Well, imagine you have a software firewall forward a server that runs onward Windows or Linux. Now you have the equivalent of a hedge (firewall) sitting on top of the real property (operating system). When a dog (hacker) flows along, rather than chew by the agency of the fence, it can just dig a hollow underneath it. With a hardware firewall, this scenario can usually be avoided.

Type of firewalls

There are three exemplars of firewall hardware technologies from which to choose:

* Packet filtering - Packets (small chunk of data) are analyzed against a plant of filters. Packets that make it within the filters are sent to your computer and the security arc discarded.

* Proxy service - Information from the Internet is retrieved through the firewall then sent to your computer and vice versa.

* Stateful packet inspection In simple confines a stateful-packet-inspection firewall doesn't accept any incoming data that was not originally petitioned from inside the network. For example, if you supplication a stock quote from Yahoo, when the packet leaves your network for Yahoo's server your firewall will log who it came from and where it was going. A scarcely any milliseconds later, when the desireed information (packet) returns from Yahoo, your firewall will inspect the packet and descry that it matches your outgoing beseech before letting it pass end the firewall.

Of these three hardware options, stateful inspection is by the agency of far the most secure. It's the archetype used by all the major vendors, and is the individual that carries ICSA certification (see link below).

Beware of the NAT box

NAT (network address translation) is self-same common in the cheapest patterns of firewalls. The important thing to understand is that, uniform though some vendors call their NAT boxe firewalls, NAT is not a security protocol-its a routing mechanism. While a NAT driver's seat is better than nothing at all, don't be merry-andrewed into thinking you can confident your organizations Internet gateway for $99

Monitoring

Firewall monitoring is an additional grade for those who want to make secure they're getting the most disclosed of their investment in security. Managed security providers will usually proffer this service for a monthly recompense In return, you should rely upon to receive real-time monitoring and syslog analysis (analysis of conclusion logs generated by Windows and UNIX networks that provides valuable information about the health and security of networks). You should also reckon upon regular firmware updates, response and escalation managements and a complete suite of reports forward your network traffic.

Real-time monitoring - Real-time monitoring obstacles you know someone is watching your firewall and network "24/7" With monitoring in place, you 11 always know your firewall is working and your network is stable If an unusual event docs take place, profitable quality monitoring software will pick it up and then a human being will take additional action.

Firmware updates - Firewalls have operating regularitys that need to have upgrade patches applied as they're released (usually about one time per quarter). If you don't apply these patches, you won't win the most out of your investment.