Firewall

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Major vendor providing firewall solutions includes

• AhnLab (KR)
• Barracuda Networks (2003)
• Check Point (1993)
• Cisco: Cisco ASA
• F5
• Forcepoint
• Fortinet (2000): Fortigate (FortiOS)
• Hillstone Networks (2006)
• Huawei
• Juniper Networks (1996) (JunOS and ScreenOS)
• New H3C Group
• Palo Alto Networks (2005)
• pfSense
• Sangfor (CN)
• SonicWall
• Shopos (UK)
• Stormshield
• Venustech (1996)
• WatchGuard

Gartner MQ reports:

• September 2019 https://www.gartner.com/en/documents/3961528/magic-quadrant-for-network-firewalls
• October 2018 https://www.gartner.com/en/documents/3891177/magic-quadrant-for-enterprise-network-firewalls

Related Topics: Software solution vs Hardware Solutions, Stateful vs stateless inspection, ACLs, Firewall placement: Internal, External

Threats protection

• Denial of service (DoS)

Backdoors

In 2016 security researchers found a SSH backdoor in FortiOS.

Related terms

• Port knocking
• DMZ
• Bastion host
• URL Filtering
• Windows firewall
• macOS application firewall

See also

• OS: PAN-OS, FortiOS, SonicOS, IPFire, JunOS
• DMZ, Application firewall, Port knocking, Bastion host, Firewall Software: iptables ufw firewalld nftables firewall-cmd ipfw (FreeBSD) PF (OpenBSD), netsh advfirewall, PAN-OS, WAF, pfsense, VyOS, Cisco ASA, DMZ, F5, URL Filtering, port forwarding, macOS application firewall, Windows firewall, Fortigate, ngrok, Network ACL
• Traffic shaping: Network bandwidth, tc, PacketShaper, Traffic QoS, IEEE P802.1p, Netperf
• Security: Security portfolio, Security standards, Hardening, CVE, CWE, Wireless Network Hacking, vulnerability scanner, Security risk assessment, SCA, Application Security Testing, OWASP, Data leak, NIST (800-53), SANS, MITRE, Security policy, Access Control attacks, password policy, password cracking, Password manager, MFA, OTP, UTF, Firewall, DoS, Software bugs, MITM, Certified Ethical Hacker (CEH) Contents, Security+ Malware, FIPS, DLP, Network Access Control (NAC), VAPT, SIEM, EDR, SOC, pentest, PTaaS, Clickjacking, MobSF, Janus vulnerability, Back Orifice, Backdoor, CSO, CSPM, PoLP, forensic, encryption, Keylogger, Pwn2Own, CISO, Prototype pollution, dnsrecon, Attack surface, Principle of least privilege (PoLP), Bounty, Linux Kernel security, Local Privilege Escalation (LPE), Secure Product Lifecycle (SPLC), Code signing

https://arstechnica.com/information-technology/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/