Router / Dedicated Firewall

ROUTER / DEDICATED FIREWALL

ROUTER

A router is a networking device that forwards data packets between computer networks. Routers perform the traffic directing functions on the Internet. Data sent through the internet, such as a web page or email, is in the form of data packets. A packet is typically forwarded from one router to another router through the networks that constitute an internet work until it reaches its destination node.

A router is connected to two or more data lines from different networks. When a data packet comes in on one of the lines, the router reads the network address information in the packet to determine the ultimate destination. Then, using information in its routing table or routing policy, it directs the packet to the next network on its journey.

The most familiar type of routers are home and small office routers that simply forward IP packets between the home computers and the Internet. An example of a router would be the owner’s cable or DSL router, which connects to the Internet through an Internet service provider (ISP). More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, software-based routers also exist.

After this nice Definition its best to say a Router is not a Firewall. A Router might have a Firewall installed in it, to allow for extra protection.

Recommendations for a Router Business or home

  1. Always change the default password
  2. Make sure it has a firewall and it is turned ON
  3. If its a Wireless Router (TURN OFF WPS- Wireless Protection Setup)
  4. Rename the router from default names such as “linksys”
  5. Make sure Firmware is up to date

 

 

Dedicated Firewall(hardware)

A business class firewall employs multiple layers of security measures to ensure your network is safe. The following 3 items are a MUST HAVE when considering protecting your private network :

  1. Traffic Scanning and Monitoring
    1. Scan network traffic in real-time for malware and spyware, and block such attempts at the firewall level before it ever makes it to the PC.
    2. Specify policy for users across the office for internet accessibility and filtering options for blocking social sites, personal email and games.
  2. Intrusion Detection System
    1. Track and monitor your bandwidth requirement based on the bandwidth usage across the firewalls. Analysis of firewall traffic logs is vital to understanding network and bandwidth usage and plays an important role in business risk assessment.
    2. View logs of intrusion attempts or remote access attempts that may originate from a 3rd party or disgruntled employee.
  3. Application control
    1. Prevent unauthorized applications from running on the network and slowing it down.
    2. Force acceptable Internet use policies that are mandated by company policy or culture.

Business class Firewall Routers may cost more money, and have subscription based protection, but they do afford to the business a better chance to protect themselves.

Recommendations

  1.  Make sure the Firewall is ON
  2.  Make sure Definitions or Firmware is the most recent
  3.  IF the router has IDS or IPS look into turn these features ON.
  4.  Always Keep log Files from the router/firewall

 

News