Yini i-firewall futhi yiziphi izinhlobo zayo?
Kulesi sihloko, sizofunda ndawonye ukuthi yini i-firewall nokuthi yiziphi izinhlobo ze-firewall ngokuningiliziwe.
Okokuqala, luyini i-firewall?
I-firewall iyithuluzi lokuphepha kwenethiwekhi elihlola ukuhamba kwedatha iye noma isuke kukhompyutha yakho phezu kwamanethiwekhi exhunywe kuwo, evumela noma evimbela ithrafikhi isuke kuye kuye ngokususelwa kusethi yemithetho yokuphepha echazwe ngaphambilini.
Inhloso yayo, empeleni, ukudala umgoqo phakathi kwekhompyutha yakho noma inethiwekhi yangaphakathi kanye nenethiwekhi yangaphandle exhunywe kuyo, ngomzamo wokuvimbela ukuhamba kwedatha eyingozi njengama-virus noma ukuhlaselwa ngokugenca.
Ngabe i-firewall isebenza kanjani?
Lapho ama-firewall ehlaziya khona idatha engenayo nephumayo ngokuya ngemithetho echazwe ngaphambilini, ukuhlunga idatha evela emithonjeni engaphephile noma esolisayo, ukuvimbela ukuhlaselwa okungahle kwenzeke kukhompyutha yakho noma kumakhompiyutha axhunywe kwinethiwekhi yakho yangaphakathi, okungukuthi, asebenza njengabaqaphi ezindaweni zokuxhuma kwikhompyutha, la maphuzu Aqanjwe igama amachweba, lapho idatha ishintshaniswa namadivayisi angaphandle.
Yiziphi izinhlobo ze-firewall?
Ama-firewalls angaba yi-software noma i-hardware, futhi empeleni, kungcono ukuba nezinhlobo zombili.
Yizinhlelo ezifakwe kuwo wonke amakhompyutha ukwenza umsebenzi wazo ekulawuleni ukuhamba kwedatha ngamachweba nangezicelo.
Izicishamlilo ze-Hardware amadivayisi aphathekayo abekwe phakathi kwenethiwekhi yangaphandle nekhompyutha yakho oxhunywe kuyo, okusho ukuthi, amele ukuxhumana phakathi kwekhompyutha yakho nenethiwekhi yangaphandle.
Izicishamlilo zohlobo lwePacket_Filtering.
Izinhlobo ezivame kakhulu zezingodo zomlilo,
Iskena amaphakethe wedatha futhi ivimbe ukudlula kwawo uma kungafani nemithetho yokuphepha ebhalwe ngaphambili ku-firewalls. Lolu hlobo luhlola umthombo wamaphakethe wedatha namakheli we-IP wamadivayisi akhishwe yiwo, ngenqubo efanayo efanayo.
● Izicishamlilo zesizukulwane sesibili
((Ama-firewalls esizukulwane esilandelayo (NGFW)
Kubandakanya ekwakhiweni kwayo ubuchwepheshe bezingodo zomdabu, ngaphezu kweminye imisebenzi enjengokubheka okubhalwe ngokufihliwe, amasistimu wokuvimbela ukungena ngaphakathi, amasistimu wama-anti-virus, futhi futhi inesici sokuhlolwa kwamaphakethe we-DPI okujulile, kuyilapho izindonga zomlilo ezijwayelekile ziskena izihloko yamaphakethe wedatha, ama-firewalls esizukulwane esisha Eyesibili (i-NGFW) ine-DPI yokuhlola ngokunembile nokuhlola idatha engaphakathi kwephakethe, inike amandla umsebenzisi ukuthi abone kahle futhi akhombe amaphakethe amabi.
● Izicishamlilo Zommeleli
(Izicishamlilo zommeleli)
Lolu hlobo lwe-firewall lusebenza ezingeni lokufaka isicelo, ngokungafani nezinye izindonga zomlilo, lusebenza njengomxhumanisi phakathi kwemikhawulo emibili yohlelo, lapho iklayenti eliyisekelayo kufanele lithumele isicelo ku-firewall yalolu hlobo ukuze ihlolwe kusetshenziswa ukuphepha imithetho yokuvumela noma yokuvimbela idatha ethunyelwe ukuhlolwa. Okuhlukanisa lolu hlobo ukuthi luhlola ithrafikhi ngokuya ngemigomo ebizwa ngokuthi yi-Layer XNUMX protocols efana ne-HTTP ne-FTP, futhi futhi inesici sokuhlolwa kwamaphakethe okujula kwe-DPI kanye namasu asemthethweni noma asemthethweni we-firewall.
● Izindonga zomlilo ezihunyushwa ngamanethiwekhi
Lezi zindonga zivumela amadivayisi amaningi anamakheli e-IP ahlukile ukuthi axhumane ndawonye kumanethiwekhi angaphandle anekheli elilodwa le-IP, ukuze abahlaseli, abathembele ekuskenizeni inethiwekhi kumakheli e-IP, bangakwazi ukuthola imininingwane ethile ngamadivayisi avikelwe lolu hlobo lwe-firewall. Lolu hlobo lwe-firewall lufana nezicishamlilo ze-Proxy ngoba lisebenza njengomxhumanisi phakathi kwawo wonke amadivayisi eliwasekelayo nenethiwekhi yangaphandle.
● Izicishamlilo ezibizwa ngama-multilayer ukuhlolwa (SMLI)
Ihlunga amaphakethe wedatha endaweni yokuxhuma nasezingeni lokufaka isicelo, ngokuwaqhathanisa namaphakethe wedatha aziwa ngaphambilini futhi athembekile, futhi njengakuma-firewall e-NGFW, iSMLI iskena lonke iphakethe ledatha futhi ivumele ukuthi idlule uma idlula zonke izingqimba namazinga okuskena, futhi inquma uhlobo loxhumano nesimo salo ukuze kuqinisekiswe ukuthi konke ukuxhumana okuqalisiwe kwenziwa kuphela ngemithombo ethembekile.
Futhi usempilweni engcono kakhulu nokuphepha kwabalandeli bethu abathandekayo
