A firewall plays a vital role in network security and needs to be properly configured to keep organizations protected from data leakage and cyberattacks.
This is possible by configuring domain names and Internet Protocol (IP) addresses to keep the firewall secure. Firewall policy configuration is based on network type, such as public or private, and can be set up with security rules that block or allow access to prevent potential attacks from hackers or malware.
Proper firewall configuration is essential, as default features may not provide maximum protection against a cyberattack.
Importance of Basic Firewall Configuration
Improper firewall configuration can result in attackers gaining unauthorized access to protected internal networks and resources. As a result, cyber criminals are constantly on the lookout for networks that have outdated software or servers and are not protected. Gartner highlighted the size and magnitude of this issue, predicting that 99% of firewall breaches would be caused by misconfigurations in 2020.
The default settings on most firewalls security and protocols like the File Transfer Protocol (FTP) do not provide the necessary level of protection to keep networks secure from cybersecurity attacks. Organizations must ensure basic firewall configuration meets the unique needs of their networks.
How To Configure a Firewall
Proper configuration is essential to supporting internal networks and stateful packet inspection. Here is how to configure a firewall securely:
1. Secure the Firewall
Securing a firewall network is the vital first step to ensure only authorized administrators have access to it. This includes actions such as:
- Update with the latest firmware
- Never putting firewalls into production without appropriate configurations in place
- Deleting, disabling, or renaming default accounts and changing default passwords
- Use unique, secure passwords
- Never using shared user accounts. If a firewall will be managed by multiple administrators, additional admin accounts must have limited privileges based on individual responsibilities
- Disabling the Simple Network Management Protocol (SNMP), which collects and organizes information about devices on IP networks, or configuring it for secure usage
- Restricting outgoing and incoming network traffic for specific applications or the Transmission Control Protocol (TCP)
2. Establish Firewall Zones and an IP Address Structure
It is important to identify network assets and resources that must be protected. This includes creating a structure that groups corporate assets into zones based on similar functions and the level of risk.
A good example of this is servers—such as email servers, virtual private network (VPN) servers, and web servers—placed in a dedicated zone that limits inbound internet traffic, often referred to as a demilitarized zone (DMZ). A general rule is that the more zones created, the more secure the network is.
However, having more zones also demands more time to manage them. With a network zone structure established, it is also important to establish a corresponding IP address structure that assigns zones to firewall interfaces and subinterfaces.
3. Configure Access Control Lists (ACLs)
Access control lists (ACLs) enable organizations to determine which traffic is allowed to flow in and out of each zone. ACLs act as firewall rules, which organizations can apply to each firewall interface and subinterface.
ACLs must be made specific to the exact source and destination port numbers and IP addresses. Each ACL should have a “deny all” rule created at the end of it, which enables organizations to filter out unapproved traffic. Each interface and subinterface also needs an inbound and outbound ACL to ensure only approved traffic can reach each zone. It is also advisable to disable firewall administration interfaces from public access to protect the configuration and disable unencrypted firewall management protocols.
4. Configure Other Firewall Services and Logging
Some firewall network security can be configured to support other services, such as a Dynamic Host Configuration Protocol (DHCP) server, intrusion prevention system (IPS), and Network Time Protocol (NTP) server. It is important to also disable the extra services that will not be used.
Further, firewalls must be configured to report to a logging service to comply with and fulfill Payment Card Industry Data Security Standard (PCI DSS) requirements.
5. Test the Firewall Configuration
With the configurations made, it is critical to test them to ensure the correct traffic is being blocked and that the firewall performs as intended. The configuration can be tested through techniques like penetration testing and vulnerability scanning. Remember to back up the configuration in a secure location in case of any failures during the testing process.
6. Manage Firewall Continually
Firewall management and monitoring are critical to ensuring that the firewall continues to function as intended. This includes monitoring logs, performing vulnerability scans, and regularly reviewing rules. It is also important to document processes and manage the configuration continually and diligently to ensure ongoing protection of the network.
Mistakes To Avoid When Setting Up a Firewall
Configuring a firewall can present difficulties, which can commonly be prevented by avoiding common mistakes, such as:
- Using broad policies or the wrong firewall settings can result in server issues, such as Domain Name System (DNS) and connectivity issues.
- Ignoring outgoing traffic can present a risk to networks.
- Relying solely on a firewall for network security or non-standard authentication methods may not protect all corporate resources.
How Fortinet Can Help
A next-generation firewall (NGFW) filters network traffic to protect organizations from both internal and external threats. The Fortinet FortiGate NGFW possesses deeper content inspection capabilities than standard firewalls, which enables organizations to identify and block advanced attacks, malware, and other threats. NGFWs also update in-line with the evolving cyber threat landscape, so that organizations are always protected from the latest threats.
The FortiConverter firewall configuration migration tool primarily applies to third-party firewall configuration migration to FortiOS—for routing, firewall, network address translation (NAT), and VPN policies and objects. The FortiGate NGFW was recognized as a Leader in Gartner’s Magic Quadrant for Network Firewalls because of its ability to protect any edge at any scale and manage security risks while reducing cost and complexity and improving operational efficiency.
Call SpartanTec, Inc. now if you’re interested in managed firewall solutions.
SpartanTec, Inc.
Columbia, SC 29201
(803) 408-7166
http://manageditservicescolumbia.com/
Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston
No comments:
Post a Comment