Design suitable packet filter rule sets to be implemented

Assignment Help Computer Network Security
Reference no: EM131826793

Assignment

You are given the following "informal firewall policy" details to be implemented using a firewall like that in Figure 12:

1. E-mail may be sent using SMTP in both directions through the firewall, but it must be relayed via the DMZ mail gateway that provides header sanitization and content filtering. External e-mail must be destined for the DMZ mail server.

2. Users inside may retrieve their e-mail from the DMZ mail gateway, using either POP3 or POP3S, and authenticate themselves.

3. Users outside may retrieve their e-mail from the DMZ mail gateway, but only if they use the secure POP3 protocol and authenticate themselves.

4. Web requests (both insecure and secure) are allowed from any internal user out through the firewall but must be relayed via the DMZ Web proxy, which provides content filtering (noting this is not possible for secure requests), and users must authenticate with the proxy for logging.

5. Web requests (both insecure and secure) are allowed from anywhere on the Internet to the DMZ Web server.

6. DNS lookup requests by internal users are allowed via the DMZ DNS server, which queries to the Internet.

7. External DNS requests are provided by the DMZ DNS server.

8. Management and update of information on the DMZ servers is allowed using secure shell connections from relevant authorized internal users (may have different sets of users on each system as appropriate).

9. SNMP management requests are permitted from the internal management hosts to the firewalls, with the firewalls also allowed to send management traps (i.e., notification of some event occurring) to the management hosts. Design suitable packet filter rule sets to be implemented on the "External Firewall" and the "Internal Firewall" to satisfy the aforementioned policy requirements.

314_Example-Firwall-Configuration.jpg
Figure 1: Example Firwall Configuration

Reference no: EM131826793

Questions Cloud

Explain the price discrimination in monopoly-type markets : Where will you see more price discrimination: in monopoly-type markets with just a few firms or in competitive markets with many firms? Why?
Determining the gpa : A survey of 55 Duke University students asked about their GPA, number of hours they study at night, number of nights they go out, and their gender.
What are possible consequences of buffer overflow occurring : What are the possible consequences of a buffer overflow occurring? What are two key elements that must be identified in order to implement a buffer overflow?
Determine what style of leadership will be most effective : Your task with the consultant group is to determine what style of leadership will be the most effective in directing the transition team? Why
Design suitable packet filter rule sets to be implemented : Design suitable packet filter rule sets to be implemented on the External Firewall and the Internal Firewall to satisfy the aforementioned policy requirements.
Where do you think gillette gets more revenue : Some razors, like Gillette's Fusion and Venus razors, have disposable heads. The razor comes with an initial pack with a razor handle plus three or four heads.
Prepare a comparative international market assessment : MKT3IMK - Prepare a comparative international market assessment. You will select a market and develop an appropriate entry strategy
What are the modalities of documenting a crime scene : What are the modalities of documenting a crime scene? Discuss this in terms of materiality, prejudicial images, distortion, and credibility
What kinds of subway customers fit into the first group : In many of our price discrimination examples, we think that businesses try to break customers into two groups: more price-sensitive and less price-sensitive.

Reviews

Write a Review

Computer Network Security Questions & Answers

  An overview of wireless lan security - term paper

Computer Science or Information Technology deals with Wireless LAN Security. Wireless LAN Security is gaining importance in the recent times. This report talks about how vulnerable are wireless LAN networks without any security measures and also talk..

  Computer networks and security against hackers

This case study about a company named Magna International, a Canada based global supplier of automotive components, modules and systems. Along with the company analysis have been made in this assignment.

  New attack models

The Internet evolution is and is very fast and the Internet exposes the connected computers to attacks and the subsequent losses are in rise.

  Islamic Calligraphy

Islamic calligraphy or Arabic calligraphy is a primary form of art for Islamic visual expression and creativity.

  A comprehensive study about web-based email implementation

Conduct a comprehensive study about web-based email implementation in gmail. Optionally, you may use sniffer like wireshark or your choice to analyze the communication traffic.

  Retention policy and litigation hold notices

The purpose of this project is to provide you with an opportunity to create a document retention policy. You will also learn how to serve a litigation hold notice for an educational institute.

  Tools to enhance password protection

A report on Tools to enhance Password Protection.

  Analyse security procedures

Analyse security procedures

  Write a report on denial of service

Write a report on DENIAL OF SERVICE (DoS).

  Phising email

Phising email It is multipart, what are the two parts? The HTML part, is it inviting the recepient to click somewhere? What is the email proporting to do when the link is clicked?

  Express the shannon-hartley capacity theorem

Express the Shannon-Hartley capacity theorem in terms of where is the Energy/bit and is the psd of white noise.

  Modern symmetric encryption schemes

Pseudo-random generators, pseudo-random functions and pseudo-random permutations

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd