How to set up a Firewall
A firewall helps defend against cyber attacks and data breaches through shielding computer or network from malicious or unnecessary network traffic.
What are the differences between a hardware and a software firewall?
- A hardware firewall is a physical device, while a software firewall is installed on an individual computer or server and operates via an application.
- A hardware firewall, usually installed at the network perimeter, is the first line of defense against cyber attack by controlling incoming traffic before data enter an enterprise network, while a software firewall controls the data entering or leaving the computer or server and blocks any suspicious traffic.
Is the firewall in the operating system good enough?
- It functions as a software firewall, which may be sufficient to protect individual devices during daily Internet browsing.
- Yet, it may not offer comprehensive coverage and protection to the enterprise network, e.g. blocking specific traffic, virus or malware infections.
Is the built-in firewall in routers good enough?
- A router can function as a hardware firewall by using network address translation (NAT) to direct incoming requests to designated devices.
- Various security settings can also be made, e.g. enabling access control via whitelisting, putting a computer in a demilitarised zone (DMZ).
- Nevertheless, it may not offer comprehensive coverage and protection as a hardware firewall does.
Which firewall fits SMEs?
It depends on the business needs and the network size. For best protection, installation of both hardware and software firewalls is recommended. In reality, there are different considerations regarding cost and maintenance. Some pros and cons are listed below for reference:
- A hardware firewall provides centralised protection for devices in the entire network, whereas a software firewall only protects individual computers, and each needs to be configured and updated individually.
- A hardware firewall takes up physical space and the installation cost is higher. If a computer is used outside a protected office network, a hardware firewall cannot offer protection. Software firewall configuration is more flexible, but it may slow down computer performance.
- A hardware firewall can be easily integrated with other security features, e.g. intrusion prevention system (IPS), sandboxing and threat intelligence gathering.
General tips for firewall setup
Basic firewall security
- Update the firewall firmware to the latest version
- Set up administrative accounts with limited privileges based on their responsibilities
- Change all default passwords
- Do not use shared user accounts
Test firewall configuration
- Conduct vulnerability scanning and penetration testing to verify if a firewall is functioning properly
- Keep a backup of the configuration
Firewall management
- Conduct regular reviews and audits, and also properly maintain and review log records to ensure a firewall functions properly
Design network zones
- Collectively group devices with similar functions and similar sensitivity requirements into network zones
- Servers that provide web-based services (e.g. email, VPN) should be placed inside the DMZ to limit inbound traffic. Other servers (e.g. file, database) should be placed in internal server zones
Configure access control lists
- Create inbound and outbound access control lists (ACL) to allow designated traffic flow into and out of each zone
- The list should be made specific to allow or deny the IP addresses/ ranges and port numbers
You may be interested in
A Vulnerability Disclosure Program (VDP) is a process by which an organization invites external security researchers to report vulnerabilities in…
Suspected Scam / Cyber Pitfall? Check it out with “Scameter”! Please Select Type Platform Username Platform ID Phone Email URL…
Recovery phrase is a list of words randomly generated by your crypto wallet (e.g. MetaMask) during initial account setup. Recovery…
A number of experts believe that spreading of virus and malware are rather difficult under iOS for the closed system…
You may have received new mobile phone as a present. After excitingly transferring data to your new mobile How to…
Cyber Security and Technology Crime Bureau, initiated a new wave of cyber hygiene operation to improve online security, maintain system…
Free Wi-Fi is provided in public places such as government public facilities, shopping malls Free Public Wi-Fi Free Wi-Fi is…
Social media and instant messaging software have become essential tools for our daily social interaction Security of Social Media Account…
If you want to protect your computer facilities and smart devices from cyber threats, please download relevant tools via the…
Multi-Factor Authentication (MFA) is to use two or more factors to authenticate Multi-Factor Authentication and Biometric Authentication Importance of Multi-Factor…
In late 2022, a virtual private network service provider published a list of the most commonly used passwords, “password” topped…
