Concepts / Firewalls

Firewalls

Firewall types

Also called packet filter, circuit-level gateway, SOCKS, application proxy, next-generation firewall, NGFW, web application firewall, WAF

From packet filters to next-generation firewalls: how much of the traffic each kind understands.

A packet filter looks at each packet's addresses and ports alone. A stateful firewall also remembers connections. A circuit-level gateway (SOCKS) relays whole TCP connections: it checks who may open a connection to where, then copies bytes without understanding them. An application proxy speaks the protocol itself, so it can judge a URL or a command; a web application firewall is one in front of web servers, matching requests against rules. A next-generation firewall puts these together in one box: stateful filtering, knowing which application a flow belongs to whatever its port, intrusion prevention, and rules by user rather than address.

See it on real machines

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Open this lab