[ E-Commerce ] [ LAN ] [ Security ] [ WAN ] [ Solusi ]

Firewalls

A firewall is a set of hardware and software implemented at a particular spot on a network infrastructure to enforce the organization's security policy. It is considered a security enforcement device. In the physical security analogy below, a firewall is the equivalent of a door lock on the perimeter or inside of a building - it permits only an authorized user (such as those with a key or badge) to enter.

Cisco IOS Firewall

The Cisco IOS Firewall, provides robust, integrated firewall and intrusion detection functionality for every perimeter of the network. Available for a wide range of Cisco IOS software-based routers, the Cisco IOS Firewall offers sophisticated security and policy enforcement for connections within an organization (intranet) and between partner networks (extranets), as well as for securing Internet connectivity for remote and branch offices.

A security-specific, value-add option for Cisco IOS Software, the Cisco IOS Firewall enhances existing Cisco IOS security capabilities, such as authentication, encryption, and failover, with state-of-the-art security features, such as stateful, application-based filtering (context-based access control), defense against network attacks, per user authentication and authorization, and real-time alerts.

The Cisco IOS Firewall is configurable via Cisco ConfigMaker software, an easy-to-use Microsoft Windows 95, 98, NT 4.0 based software tool.

The Cisco IOS Firewall provides great value in addition to these benefits:

• Flexibility - the all-in-one solution provides multiprotocol routing, perimeter security, intrusion detection, VPN functionality and dynamic, per-user authentication and authorization
• Scalable deployment - scales to meet any network's bandwidth and performance requirements
• Investment protection - leverages existing multiprotocol router investment
• VPN support - provides a complete VPN solution based on Cisco IOS IPSec, and other CISCO IOS software-based technologies, including L2TP tunneling and Quality of Service (QOS)

http://www.cisco.com/warp/public/cc/pd/iosw/ioft/iofwft/index.shtml

Cisco IOS Firewall Feature Set
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120t/120t5/iosfw2/index.htm

Cisco Secure PIX Firewall

The Cisco Secure PIX Firewall has obtained the top ranking in both market share and product performance and has been the Cisco flagship security product since 1996. Installed on a network, the PIX Firewall determines whether the traffic type crossing in either direction is authorized. If the traffic is authorized, it enables the connection without even moderate impact on network performance. All disallowed traffic is dropped completely.

Key Strengths / Features / Benefits

• Security — The Cisco Secure PIX Firewall uses a hardened operating system focused on protecting both the security of the device and the protected networks. Many other competing firewalls are based on large, general-purpose operating systems intended for diverse functions and are, therefore, more vulnerable to Internet threats.

• Performance — The PIX Firewall handles several times the capacity of any competitive offering, and provides unbeaten security with the least possible impact on network performance.

• Stability — Because the PIX Firewall is intended for only one purpose — security — and it doesn't contain the ability to do other tasks, it is extraordinarily stable. This is a fundamental requirement for a device playing such an important role in the network. The average time between failures of the PIX Firewall is in excess of six years, meaning six years of continual performance.

• Ease of Installation and Maintenance — As a dedicated appliance, the Cisco Secure PIX Firewall is easy to install and maintain. No software needs to be installed, and no server ports need to be configured.

• Imbedded Standards-based VPN — As part of its security functions, the PIX Firewall also provides an IPSec standards-based virtual-private-network (VPN) capability. In conjunction with its market-leading firewall performance, the PIX Firewall also performs VPN functions at market-leading speeds.