Yintoni i-firewall kwaye ziziphi iintlobo zayo?
Kweli nqaku, siza kufunda kunye malunga nokuba yintoni i-firewall kwaye zeziphi iintlobo ze-firewall ngokubanzi.
Okokuqala, yintoni i-firewall?
I-firewall sisixhobo sokhuseleko sothungelwano esibeka esweni ukuhamba kwedatha ukuya nokusuka kwikhompyuter yakho ngaphezulu kothungelwano oluqhagamshelwe kuyo, ivumela okanye ithintele i-traffic ukusuka ukuya kuyo ngokusekwe kwiseti yemithetho yokhuseleko echazwe kwangaphambili.
Injongo yalo, ngokuqinisekileyo, kukudala umqobo phakathi kwekhompyuter yakho okanye inethiwekhi yangaphakathi kunye nenethiwekhi yangaphandle edityaniswe kuyo, ngenzame yokuthintela ukuhamba kwedatha eyingozi efana neentsholongwane okanye ukuhlaselwa kwe-hacking.
Isebenza njani i-firewall?
Apho i-firewalls ihlalutya idatha engenayo kunye nephumayo ngokusekelwe kwimithetho echazwe kwangaphambili, ukuhluza idatha evela kwimithombo engakhuselekanga okanye ekrokrelayo, ukuthintela ukuhlaselwa okunokwenzeka kwikhompyutheni yakho okanye iikhompyutheni eziqhagamshelwe kwinethiwekhi yakho yangaphakathi, oko kukuthi, zisebenza njengabalindi kwiindawo zokudityaniswa kwekhompyutha, ezi ngongoma Zithiywe. amazibuko, apho idatha itshintshiselwa ngezixhobo zangaphandle.
Zeziphi iintlobo ze-firewall?
Iifirewall zinokuba yisoftware okanye ihardware, kwaye eneneni, kungcono ukuba nazo zombini ezi ndidi.
Ziinkqubo ezifakwe kwikhompyuter nganye ukwenza umsebenzi wazo ekulawuleni ukuthuthwa kwedatha ngamazibuko kunye nezicelo.
Iifirewall zizixhobo ezibonakalayo ezibekwe phakathi kwenethiwekhi yangaphandle kunye nekhompyuter yakho oqhagamshelwe kuyo, oko kukuthi, zimele unxibelelwano phakathi kwekhompyuter yakho kunye nenethiwekhi yangaphandle.
Iifirewall zezodidi lwePakethe_loHluzo.
Iintlobo eziqhelekileyo zomlilo,
Ihlola iipakethi zedatha kwaye ivale indlela yazo ukuba ayihambelani nemithetho yokhuseleko edweliswe ngaphambili kwii-firewalls. Olu hlobo luhlola umthombo weepakethi zedatha kunye needilesi ze-IP zezixhobo ezikhutshwe ngabo, kwinkqubo ethethiweyo yokudibanisa.
● Iifirewall zesizukulwana sesibini
((Isizukulwana esilandelayo somlilo (NGFW)
Ibandakanya kuyilo lwayo itekhnoloji yeefirewall zemveli, ukongeza kweminye imisebenzi efana ne-encrypted pass-checking, iinkqubo zokuthintela ukungena, iinkqubo zokulwa nentsholongwane, kwaye ikwanophawu lokuhlolwa kwepakethi ye-DPI enzulu, ngelixa i-firewall eqhelekileyo ihlola iiheader. iipakethe zedatha, i-firewall yesizukulwana esitsha Eyesibini (NGFW) ine-DPI yokuphonononga ngokuchanekileyo kwaye ihlolisise idatha ngaphakathi kwepakethi, eyenza umsebenzisi ukuba abone ngokufanelekileyo kwaye achonge iipakethi ezikhohlakeleyo.
● Iifirewall zommeli
(Iiproksi zomlilo)
Olu hlobo lwe-firewall lusebenza kwinqanaba lesicelo, ngokungafaniyo namanye ama-firewall, lusebenza njengomlamli phakathi kweziphelo ezimbini zenkqubo, apho umxhasi oyixhasayo kufuneka athumele isicelo kwi-firewall yolu hlobo ukuba ivavanywe ngokuchasene neseti yokhuseleko. imithetho yokuvumela okanye ukuthintela idatha ethunyelwe ukuba ihlolwe. Yintoni eyahlula olu hlobo kukuba ibeka iliso kwi-traffic ebizwa ngokuba yi-protocol ye-XNUMX efana ne-HTTP kunye ne-FTP, kwaye inomsebenzi wokuhlolwa kwepakethi ye-DPI enzulu kunye neendlela ezisemthethweni okanye ezisemthethweni zomlilo.
● Iifirewall zokuguqulela idilesi yenethiwekhi (NAT).
Ezi zixhobo zomlilo zivumela izixhobo ezininzi ezineedilesi ezahlukeneyo ze-IP ukuba zidibanise kunye namanethiwekhi angaphandle kunye nedilesi ye-IP enye, ukwenzela ukuba abahlaseli, abaxhomekeke kwinethiwekhi yokuskena kwiidilesi ze-IP, abanako ukufumana iinkcukacha ezithile malunga nezixhobo ezikhuselweyo ngolu hlobo lwe-firewall. Olu hlobo lomlilo luyafana nodonga lwe-Proxy ngokuba lusebenza njengomlamli phakathi kwazo zonke izixhobo ezizixhasayo kunye nenethiwekhi yangaphandle.
● Iifirewall ezisemthethweni zokuhlolwa kwemigangatho emininzi (SMLI).
Ihlunga iipakethi zedatha kwindawo yoqhagamshelwano kunye nenqanaba lesicelo, ngokuthelekisa kwiipakethi zedatha ezaziwa ngaphambili nezithembekileyo, kwaye njengakwi-firewall ye-NGFW, i-SMLI ihlola yonke ipakethe yedatha kwaye iyivumele ukuba idlule ukuba idlula zonke iileya kunye namanqanaba okuskena, ikwamisela uhlobo loqhagamshelo kunye nobume bayo ukuze kuqinisekiswe ukuba lonke unxibelelwano oluqalwayo lwenziwa kuphela ngemithombo ethembekileyo.
Kwaye usempilweni kwaye ukhuselekile kubalandeli bethu abathandekayo
