Home > Ask the Networking Experts > Network security Questions & Answers > Firewall security risks
Ask The Networking Expert: Questions & Answers
EMAIL THIS

Firewall security risks

Puneet Mehta EXPERT RESPONSE FROM: Puneet Mehta

Pose a Question
Other Networking Categories
Meet all Networking Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 09 February 2002
What are the key security risks and considerations to adopt firewall/VPN technology?

>
Some key security risks and standards which should be considered while adopting a firewall/VPN are as follows:

Risks:
=====
Risks are threats to your objectives. A proper risk analysis should be done before making any technology decision.
Risk assessment should address the following:

What is at risk?
What is its value?
What are the threats?
What is the probability of occurrence?

Some of the common security risks are as follows:
--------------------------------------------------------------------------

Single point of failure
Loose security policies
Support protection
Limitation of technology
False sense of security
Weak encryption
Latency

Here are some firewall/VPN standards to consider:
======================================
Open architecture
Packet filteration
Default to denial
Auditing capabilities
Access control
Logging capabilities
Intrusion detection
Extended user authentication
Secured subnets
Strong encryption
Network management systems
Secure back-up
Statefull inspection
Real-time traffic monitoring and alerting system
Device management
Secure tunneling
Application layer traffic inspection


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Network security
Where can I find Puneet Mehta's most recent network security advice?
How do VPN concentrators and network access servers (NAS) differ?
What keeps unauthorized users from accessing my IP address/Internet?
Controlling network access by MAC address restriction on wired networks
Retrieve network resources and email after installing ISA Server 2004
What does a QM FSM error signify on a VPN Concentrator?
How to block porn with ISA-server firewalls
Who is responsible for updating network firewalls?
How to locate the lost IP address of an access point (AP)
What HIPPA-compliant software would you recommend for online medicine?

Network Security Monitoring and Analysis
Application-specific network intrusion detection systems emerge
Anomaly-based intrusion protection configuration and installation
How can I calculate perimeter firewall throughput?
How do I find the application on my network that's dropping packets?
Integrating NAC with network security tools
Where can I find a sample security audit report? How can I run my own?
The firewall remains the network traffic cop, but its role is changing
Troubleshooting VLANs: How to monitor 802.1q tagged traffic
Poor data-loss prevention practices almost cost Intel a billion
How can I block my competitor's IP address range from my website?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
deep packet inspection (DPI)  (SearchNetworking.com)
FCAPS  (SearchNetworking.com)
Nessus  (SearchNetworking.com)
netstat  (SearchNetworking.com)
port mirroring  (SearchNetworking.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Expert networking advice and tips for IT professionals
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2000 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts