|
Data Security in Local Network using
Distributed Firewalls
Distributed firewalls are host-resident security software applications
that protect the enterprise network's servers and end-user machines
against unwanted intrusion. They offer the advantage of filtering traffic
from both the Internet and the internal network. This enables them to
prevent hacking attacks that originate from both the Internet and the
internal network. This is important because the most costly and
destructive attacks still originate from within the organization.
They are like personal firewalls except they offer several important
advantages like central management, logging, and in some cases,
access-control granularity. These features are necessary to implement
corporate security policies in larger enterprises. Policies can be defined
and pushed out on an enterprise-wide basis.
A feature of distributed firewalls is centralized management. The ability
to populate servers and end-users machines, to configure and "push
out" consistent security policies helps to maximize limited
resources. The ability to gather reports and maintain updates centrally
makes distributed security practical. Distributed firewalls help in two
ways. Remote end-user machines can be secured . Secondly, they secure
critical servers on the network preventing intrusion by malicious code and
"jailing" other such code by not letting the protected server be
used as a launch pad for expanded attacks.
|