Question:

(a) Mention three limitations of a firewall.

(b) Compare packet-filtering and proxy-base firewalls. Give advantages and drawbacks of both.

(c) "Proxies effectively hide machines residing behind it from the Internet." Justify this statement.

(d) Which type of Intrusion Detection System (IDS) is only effective against known attack methods?

(e) Describe a Honeypot.

(f) Imagine you are the network manager of a company which uses a DMZ/firewall configuration to secure its connection to the Internet. You discover that an employee has attached a modem to his office phone line so that he can dial in to his desktop computer to get access to his files so he can work at home.

i. Is this a potential security risk for the company? Explain.

ii. What immediate action should you take in this situation?

iii. The employee has a legitimate need to work from home. How should you handle this?