Explain the limitations of a firewall, Computer Network Security

Question:

(a) Mention three limitations of a firewall.

(b) Compare packet-filtering and proxy-base firewalls. Give advantages and drawbacks of both.

(d) Which type of Intrusion Detection System (IDS) is only effective against known attack methods?

(e) Describe a Honeypot.

(f) Imagine you are the network manager of a company which uses a DMZ/firewall configuration to secure its connection to the Internet. You discover that an employee has attached a modem to his office phone line so that he can dial in to his desktop computer to get access to his files so he can work at home.

i. Is this a potential security risk for the company? Explain.

ii. What immediate action should you take in this situation?

iii. The employee has a legitimate need to work from home. How should you handle this?

Related Discussions:- Explain the limitations of a firewall

Cipher methods-cryptography, Cipher Methods There are 2 methods of encry...

Cipher Methods There are 2 methods of encrypting plaintext: • Bit stream method – every bit in the plaintext bit is transformed into a cipher bit one bit at a time. • Block cip

Explain how the key exchange algorithm works, Question: (a) Explain how...

Question: (a) Explain how the Diffie-Hellman key establishment protocol works. (b) Prove that the Diffie-Hellman key establishment protocol is vulnerable to a `man in the mi

Determine the round trip time, a) determine the RTT (round trip time) betwe...

a) determine the RTT (round trip time) between a client requesting a web page of 1024 bytes in size from an internal web server on a 100 Base-T Ethernet. Assume a one-way propagati

Representation of a tcp header, (a) Figure is a representation of a TCP hea...

(a) Figure is a representation of a TCP header. For each of the fields lettered from A to G, state the name of the field and provide a brief explanation for the function of each fi

Explain belady''s anomaly, Belady's Anomaly Also known FIFO anomaly. G...

Belady's Anomaly Also known FIFO anomaly. Generally, on raising the number of frames given to a process' virtual storage, the program execution is faster, because lesser page

Explain security, W h a t do you understand by the terms security, netwo...

W h a t do you understand by the terms security, network security and information security? How network security and information security are connected? Security can be def

Ucsf medical center case study-information security, Example : UCSF Medical...

Example : UCSF Medical Center In the year 2002, the University of California, San Francisco (UCSF) Medical Center received an email message from someone who claimed to be a doct

Firewalls-information security, Firewalls A firewall in an information s...

Firewalls A firewall in an information security program that prevents specific types of information from moving between the outside world and the inside world. The firewall may

Compare and contrast the trust models-pgp, a. PKI and PGP are two methods f...

a. PKI and PGP are two methods for generating and managing public keys for use in protocols such as secure email. Compare and contrast the trust models for public keys used in PKI

Security policies, implementing password policy in organisation

implementing password policy in organisation

Write Your Message!

Name

Email id

Message

Verfication Code

User Account

All Pages