Difference between revisions of "Firewall"
Jump to navigation
Jump to search
↑ https://arstechnica.com/information-technology/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| (27 intermediate revisions by 2 users not shown) | |||
| Line 4: | Line 4: | ||
Major vendor providing firewall solutions includes | Major vendor providing firewall solutions includes | ||
* AhnLab (KR) | * AhnLab (KR) | ||
| − | * | + | * [[Barracuda Networks]] (2003) |
| − | * [[Check Point]] | + | * [[Check Point]] ([[1993]]) |
* Cisco: [[Cisco ASA]] | * Cisco: [[Cisco ASA]] | ||
| + | * [[F5]] | ||
* Forcepoint | * Forcepoint | ||
| − | * [[Fortinet]]: [[Fortigate]] ([[FortiOS]]) | + | * [[Fortinet]] ([[2000]]): [[Fortigate]] ([[FortiOS]]) |
| − | * [[Hillstone Networks]] | + | * [[Hillstone Networks]] ([[2006]]) |
| − | * Huawei | + | * [[Huawei]] |
| − | * [[Juniper Networks]] ([[JunOS]] and [[ScreenOS]]) | + | * [[Juniper Networks]] ([[1996]]) ([[JunOS]] and [[ScreenOS]]) |
| + | * New H3C Group | ||
| + | * [[Palo Alto Networks]] ([[2005]]) | ||
| + | * [[pfSense]] | ||
| + | * Sangfor (CN) | ||
| + | * [[SonicWall]] | ||
| + | * [[Shopos]] (UK) | ||
| + | * Stormshield | ||
| + | * [[Venustech]] ([[1996]]) | ||
| + | * WatchGuard | ||
| + | [[Gartner MQ]] reports: | ||
| + | * September 2019 https://www.gartner.com/en/documents/3961528/magic-quadrant-for-network-firewalls | ||
| + | * October 2018 https://www.gartner.com/en/documents/3891177/magic-quadrant-for-enterprise-network-firewalls | ||
Related Topics: Software solution vs Hardware Solutions, Stateful vs stateless inspection, [[ACL]]s, Firewall placement: Internal, External | Related Topics: Software solution vs Hardware Solutions, Stateful vs stateless inspection, [[ACL]]s, Firewall placement: Internal, External | ||
| Line 23: | Line 36: | ||
== Backdoors == | == Backdoors == | ||
In 2016 security researchers found a [[SSH]] backdoor in [[FortiOS]].<ref>https://arstechnica.com/information-technology/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/</ref> | In 2016 security researchers found a [[SSH]] backdoor in [[FortiOS]].<ref>https://arstechnica.com/information-technology/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/</ref> | ||
| + | |||
| + | |||
| + | == Related terms == | ||
| + | * [[Port knocking]] | ||
| + | * [[DMZ]] | ||
| + | * [[Bastion host]] | ||
| + | * [[URL Filtering]] | ||
| + | * [[Windows firewall]] | ||
| + | * [[macOS application firewall]] | ||
== See also == | == See also == | ||
Latest revision as of 09:50, 19 November 2021
A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Major vendor providing firewall solutions includes
- AhnLab (KR)
- Barracuda Networks (2003)
- Check Point (1993)
- Cisco: Cisco ASA
- F5
- Forcepoint
- Fortinet (2000): Fortigate (FortiOS)
- Hillstone Networks (2006)
- Huawei
- Juniper Networks (1996) (JunOS and ScreenOS)
- New H3C Group
- Palo Alto Networks (2005)
- pfSense
- Sangfor (CN)
- SonicWall
- Shopos (UK)
- Stormshield
- Venustech (1996)
- WatchGuard
Gartner MQ reports:
- September 2019 https://www.gartner.com/en/documents/3961528/magic-quadrant-for-network-firewalls
- October 2018 https://www.gartner.com/en/documents/3891177/magic-quadrant-for-enterprise-network-firewalls
Related Topics: Software solution vs Hardware Solutions, Stateful vs stateless inspection, ACLs, Firewall placement: Internal, External
Threats protection[edit]
- Denial of service (DoS)
Backdoors[edit]
In 2016 security researchers found a SSH backdoor in FortiOS.[1]
Related terms[edit]
See also[edit]
- OS: PAN-OS, FortiOS, SonicOS, IPFire, JunOS
- DMZ, Application firewall, Port knocking, Bastion host, Firewall Software:
iptablesufwfirewalldnftablesfirewall-cmdipfw (FreeBSD)PF (OpenBSD), netsh advfirewall, PAN-OS, WAF, pfsense, VyOS, Cisco ASA, DMZ, F5, URL Filtering, port forwarding, macOS application firewall, Windows firewall, Fortigate, ngrok, Network ACL - Traffic shaping: Network bandwidth,
tc, PacketShaper, Traffic QoS, IEEE P802.1p,Netperf - Security: Security portfolio, Security standards, Hardening, CVE, CWE, Wireless Network Hacking, vulnerability scanner, Security risk assessment, SCA, Application Security Testing, OWASP, Data leak, NIST (800-53), SANS, MITRE, Security policy, Access Control attacks, password policy, password cracking, Password manager, MFA, OTP, UTF, Firewall, DoS, Software bugs, MITM, Certified Ethical Hacker (CEH) Contents, Security+ Malware, FIPS, DLP, Network Access Control (NAC), VAPT, SIEM, EDR, SOC, pentest, PTaaS, Clickjacking, MobSF, Janus vulnerability, Back Orifice, Backdoor, CSO, CSPM, PoLP, forensic, encryption, Keylogger, Pwn2Own, CISO, Prototype pollution, dnsrecon, Attack surface, Principle of least privilege (PoLP), Bounty, Linux Kernel security, Local Privilege Escalation (LPE), Secure Product Lifecycle (SPLC), Code signing
Advertising:
