What is a Firewall? | Traditional + Next Generation

Join the Discord Server!
---------------------
MY FULL CCNA COURSE

FREE CCNA FLASHCARDS

HOW TO PASS THE CCNA

SOCIAL

Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------

So first, what is a firewall?

Now while most of the word is full of good-intentioned trustworthy people, there are a huge number of bad guys out there that want to take down your systems and get their hands on your hard-earned money!

With routers generally having minimal security features, you can quickly be at the mercy of the attackers.

This is where firewalls come in. Firewalls are designed to shield and protect our trusted networks from the untrusted.

The idea is that a firewall will block all the bad traffic from the attackers.
While at the same time, allow normal flow for the good traffic.

Most firewall, by default, block everything!

It doesn't matter if its traffic leaving the network or traffic entering the network. Everything is blocked.

The way we allow traffic to pass the firewall without being block is by adding firewall rules.

Next-gen firewalls take the same methods but then enhances them with more in-depth security features.

Generally speaking, this is what a next-generation firewall should include.

Application Level Inspection: So the firewall can identify and block risky application traffic.

Intrusion Prevention Systems or IPS: IPS will inspect the contents of the traffic and look for patterns or signatures of malicious or malware related traffic.

External Threat Intelligence: Next-generation firewalls can update themselves from external threat intelligence sources.

Computers can also have software-based firewalls. For example, the windows firewall is built-in and uses the same rule-based methods. Such as port, destination, and source IP addresses.

Having a firewall both on the network and the endpoints is important when creating a layer security posture.

#ccna #cisco #networking

[bushybwoy]

I'm a CCNP for over a decade and always use your videos for interview prepping. Cheers.

[seetsamolapo]

Don't mind me just making myself some notes:


Firewall
- On a local network as an admin you have a great level of control on the devices and therefore can assure security but outside in the public internet you cannot
- shielding/protecting a trusted network by blocking unwanted traffic from networks, while allowing desired traffic from untrusted networks
- firewalls block everything by default, both outgoing traffic and incoming traffic
- traffic is allowed by adding traffic rules that specify source IP, destination, port and action
- Stateful firewalls monitor active connections therefore automatically allow response traffic if there was an initial request traffic even if the firewall denies all other incoming traffic
Endpoint firewalls are made to catch the bad traffic that might pass the network firewall or if the threat comes from internally, inside the network
- Having a firewall on both the network and endpoint is important to have a layered security posture and in case the threat is from an internal source

[socratesmustafa]

I recommended your channel to our trainees at the company. The explanation is really easy to understand and I don't need to watch the video twice. I did understand a lot from your channel. Best regards from Germany 😀

[amigazo]

I am not studying for CCNA, but for Security+. Your videos have made my learning so easy, so entertained. This has become one of my YouTube favourite channels by far! Thanks a lot :D

[ardentdfender]

Your not the only channel I watch thats in the Networking Tech sphere on YouTube as I watch many for content need and educational awareness, but I can plainly say you do a far more fantastic job by a wide margin to make complex technical info seem easily understandable, learnable, teachable and easy to remember thus learning the information. While I may not always remember everything because it takes time to mentally digest new info, it is the best presented information that can be easily learned. On some topics in the future, you could do a deeper dive on some aspects of many topics. However, to initially learn a topic you cover it superbly.

[sourakantimandal]

Best on the topic probably ! It entered my brain like "knife in butter"...😊😊😊😊

[zackerythomas]

Quite clear without injecting too many other confusing detailed terminologies. Great videos for all levels of knowledge.
Even if I may know some of the topics in your videos I still watch them because different explanations from different sources do help me grasp a bigger picture.

[GT-meke]

Great video, needed to refresh my knowledge! I did the PCNSA earlier this year and I highly recommend for anyone working with PA NGFW's.

[itaybarok]

Wow that is a very interesting topic.
It is well known that one picture is valueable more than 1000 of words. You have dozens of great pictures on your videos and that is why they are only to the point yet so good. The images help understanding the overall idea.
I learned about the network firewall and about the firewall table that allowes the traffic requestd in its rows to pass and the replay of the request to come back and the else not. In addition I learned the important of end point firewall.
The example of the rooms and front house door was very useful to see. The network firewall is the front door and the room's doors are the end point firewalls. Perfect example.
Additionly I learned about NGFW and the importance of it from the security perspective.
Keep up with your sharing of knowledge.

[johnsonakanbi]

Wow, insightful and clearly explained!

[shriniwassomvanshi]

This is the only technology channel I have suscribed.
The reason is,
its just awesome.

[gabrielmatandiko]

Wow!! You are a genius. I cannot thank you enough. Great video how I wish you could make CCNP videos. Regardless, thank you

[freddymyboi]

I am so glad I have found your channel. All videos are very well explained. You have no idea how much you are helping me out. Thank you very much !

[NK_Nibs]

Appriciate the simple way of explaination, Happy Learning. Thanks !

[emsheeranstudio]

Best explanation in the world bro ❤️❤️ hats off bro, you deserve 10million views for this creation 🥺🥺... Your the best bro may Allah help you

[impetous]

u are awsome its understandable for every nation human

[ozamrani]

Can you do videos on EDR ? Anti Virus ? IPS ? Mail Relay ? DLP ?WAF ? Proxy ?

[lavanyabakshi]

Loved IT !! Thanks for clearing my doubts, CertBros ROCK !!!! can I also get the entire playlist for computer network

[DeanCyber]

Hi, great videos. Do you mind me asking what software do you use for your videos? Thanks

[ashishkumarseth]

please make a video of Using NGFW in ZTA(zero trust architecture).