Firewall

This article may be deleted soon.

|  | To oppose or discuss a nomination, please go to CZ:Proposed for deletion and follow the instructions.

For the monthly nomination lists, see Category:Articles for deletion.

| Main Article
| Discussion
| Related Articles  [?]
| Bibliography  [?]
| External Links  [?]
| Citable Version  [?]

|
|
|
|
|
|
|
|

This editable Main Article is under development and subject to a disclaimer.

[edit intro]

In computer networks, a firewall is a set of information security functions that may or may not reside in a single physical computer. Large or fault-tolerant networks have multiple firewalls. The functions control certain types of access to the protected network. Most often, we think of the attacks as coming from the Internet, but firewalls have applications for internal networks -- and not all secure access through the Internet goes through a firewall.

Some basic firewall functions include:

* Stateless packet filtering
* Stateful packet inspection
* Network address translation
* Proxy services
* Security logging

## What a firewall is not[edit]

* A substitute for a security policy
* A substitute for information security administration
* (necessarily) a single computer
* A guarantee of network security

## Firewalls are not primary protection against[edit]

* Attacks inside the protected network
* Some denial of service attacks
* Most malware
* Fraudulent authentication
* Human error

## Cooperating services[edit]

These may or may not share computers, although it is wise to have the minimum possible number of services on a firewall.

* Authentication server
* Split DNS
* Network Intrusion Detection System
* Host Intrusion Detection System
* Honeypot
* Screening router
* Virtual Private Network concentrator
* Network time server