Iyini i-Firewall: Konke Odinga Ukukwazi Ukuze Uvikele Amadivayisi Akho

Isibuyekezo sokugcina: 14/10/2024

Iyini i-firewall

Esikhathini samanje sedijithali, lapho ukuxhumana kwethu, idatha yomuntu siqu kanye nolwazi olubucayi luzungeza ngesivinini esikhulu ku-inthanethi, ukuba nezinyathelo zokuvikela kubalulekile. Enye yezinto ezisetshenziswa kakhulu nezibalulekile ukuvikela amanethiwekhi ethu i-firewall, eyaziwa nangokuthi i-firewall. Nakuba kade yaba nathi isikhathi eside, isengenye yezingxenye ezibalulekile zokuvikela inethiwekhi.

Nakuba umsebenzi wabo oyinhloko uwukuvimbela noma ukuvumela ithrafikhi ngokusekelwe emithethweni ethile, iqiniso liwukuthi izindonga zomlilo ziye zavela, futhi namuhla kunezinhlobo ezahlukene ezinamakhono ahlukene. Kulesi sihloko sikutshela konke okudingeka ukwazi mayelana nokuthi iyini i-firewall, ukuthi isebenza kanjani nokuthi kungani ibalulekile ekuvikelekeni kwenethiwekhi, kungakhathaliseki ukuthi kusenkampanini, kunethiwekhi yasekhaya noma kumishini yethu yomuntu siqu.

Iyini i-Firewall?

Un firewall Kuyisithiyo sokuvikela esisetshenziselwa ukuvikela inethiwekhi yangasese noma idivayisi ezinsongweni ezingaba khona noma ukufinyelela okungagunyaziwe. Isebenza ngokulawula nokuhlunga i- ithrafikhi engenayo nephumayo, ukuvumela noma ukuvimba idatha ngokusekelwe ochungechungeni lwezinqubomgomo zokuphepha ezichazwe ngaphambilini. Igama layo livela ekufanisweni nezithiyo ezibonakalayo ezivimbela ukusabalala komlilo, ngoba lisebenza njengodonga oluvimbela izinsongo ekuhambeni ngenethiwekhi.

Kukhona i-firewalls yesofthiwe kanye hardware. Ezangaphambili izinhlelo ezifakwe kumadivayisi, kanti ezakamuva ziyimishini ephathekayo, njengamarutha, avikela yonke inethiwekhi yamadivayisi. Zombili zinenjongo efanayo: ukuvikela amasistimu ngokuvimbela ukufinyelela okungagunyaziwe.

Iyini i-firewall?

Umsebenzi oyinhloko we-firewall ngu hlunga ithrafikhi yenethiwekhi ukuvikela amadivayisi axhunyiwe ekuhlaselweni ku-inthanethi, I-malware, ukufinyelela okungagunyaziwe nezinye izinsongo. Kodwa kudlula nje ukuvimba ithrafikhi esolisayo; Ingase futhi ihlole futhi ifake imizamo yokufinyelela, isize ukuhlonza ubungozi obungaba khona futhi ithuthukise ukuzivikela. Ezinye zezinto ezisetshenziswa kakhulu yilezi:

  • Ivimba ukufinyelela okungagunyaziwe: I-firewall isebenza njengomugqa wokuqala wokuzivikela kubahlaseli.
  • Ukuhlunga ithrafikhi: Vumela noma vimba ithrafikhi ngokusekelwe kuzinqubomgomo ezilungiselelwe ngaphambilini.
  • ukuvikelwa kohlelo olungayilungele ikhompuyutha: Ingathola i-malware noma imizamo yegciwane ezama ukufinyelela inethiwekhi.
  • Ukuqapha nokubhaliswa: I-firewall ingangena imizamo yokufinyelela nezinye izehlakalo ezihlobene nokuphepha kwenethiwekhi.
  Lungisa Umyalelo Wephutha Enkumbulo Okubhekiselwe Kuyo Ku-0x00

Izinhlobo ze-firewall

Izinhlobo ze-Firewall

Kukhona okuhlukile izinhlobo zomlilo, ngayinye yakhelwe ukunikeza izinga elithile lokuphepha, kuye ngohlobo lwenethiwekhi nezidingo zomsebenzisi. Izinhlobo eziyinhloko yilezi:

I-Firewall Yokuhlunga Iphakethe

Lokhu kungenye ye izinhlobo ezindala firewall, kodwa isasetshenziswa kabanzi. Ihlunga amaphakethe edatha ezama ukungena noma ukushiya inethiwekhi ngokusekelwe ku ikheli le-IP kanye nendawo okuyiwa kuyo, imbobo kanye nephrothokholi. Nakuba kulula, ayihloli okuqukethwe kwamaphakethe, okwenza kube sengozini yokuhlaselwa okuyinkimbinkimbi.

I-Stateful Inspection Firewall

Lolu hlobo lwe-firewall lungeza izinga eliphezulu lokuphepha ku- qapha isimo sokuxhuma. Ikhumbula ukuxhumana okusungulwe ngaphambilini futhi ivumela noma inqabe ithrafikhi ngokusekelwe kumongo nesimo samanje, iyenze isebenze kahle kunokuhlunga kwephakethe okulula.

I-Proxy Firewall

Ama-firewall ommeleli asebenza njengabalamuli phakathi kwenethiwekhi yangaphakathi neyangaphandle. Hlunga ithrafikhi yenethiwekhi kusendlalelo sohlelo lokusebenza, okusho ukuthi bangaqinisekisa okuqukethwe kwamaphakethe ngaphezu kwamakheli e-IP nezimbobo. Nakuba zinikeza izinga eliphezulu lokuphepha, zingathinta ukusebenza kwenethiwekhi ngenxa yenani elikhulayo lokucubungula abalidingayo.

I-Next Generation Firewall (NGFW)

Ama-firewall esizukulwane esilandelayo ahlanganisa izici zokuphepha eziningi, njenge ukuhlolwa kwephakethe okujulile kanye namasistimu okuthola ukungena, ukunikeza ukuvikeleka okuphelele kakhulu ezinsongweni ezifana nohlelo olungayilungele ikhompuyutha oluthuthukisiwe. Zisetshenziswa kakhulu ezindaweni zamabhizinisi ngenxa yekhono lazo lokuhlonza nokunciphisa izinsongo eziyinkimbinkimbi.

Isebenza kanjani i-Firewall?

Ukusebenza kwe-firewall kulula ngokombono, kodwa kungaba yinkimbinkimbi ekusebenzeni, njengoba kuncike emithethweni yokumisa neyokuvikela esetshenziswayo. Ngokuyisisekelo, i-firewall iqapha zonke izimoto ezingenayo neziphumayo yenethiwekhi, evumela noma evimba ithrafikhi ngokuya ngesethi yemithetho. Le mithetho inquma ukuthi yiziphi izinhlobo zethrafikhi eziphephile futhi ezingaba yingozi.

  Indlela i-CipherPass Esebenza Ngayo Incwadi Eyimfihlo Yamaphasiwedi

Isibonelo, uma inkampani ifuna kuphela ukuvumela ukufinyelela kumawebhusayithi athile, ingamisa i-firewall ukuthi ivimbe wonke amanye amasayithi angaphandle kohlu oluvunyelwe. Ngokufanayo, i-firewall ingalungiselelwa hlunga ithrafikhi kusuka kumachweba athile enethiwekhi, ukuvimbela izimbobo ezivame ukusetshenziswa izigebengu ukuhlasela isistimu.

 

  • Umsuka wethrafikhi: Iphakethe ledatha ngalinye linomthombo kanye nekheli le-IP okuyiwa kulo. I-firewall inganquma ukuthi leyo thrafikhi ivela kumthombo othembekile noma cha.
  • Indawo yethrafikhi: Njengomsuka, i-firewall ingaphinda ivimbe ukufinyelela kumakheli athile we-IP.
  • Okuqukethwe kwethrafikhi: Ezinye izindonga zomlilo, njengezinqamuli zomlilo zesendlalelo sohlelo lokusebenza, zihlola okuqukethwe kwangempela kwamaphakethe wedatha ukuze uthole okuqukethwe okunonya.

Ukubaluleka Kwezicishamlilo Ekuvikelekeni Kwekhompyutha

Ama-firewall awavimbi kuphela ithrafikhi engafunwa, kodwa futhi ukusiza ukudala amalogi wokuhlola emizamweni yokufinyelela, engaba usizo kakhulu ezinkampanini ezifuna ukuthuthukisa izindlela zazo zokuphepha. Esimweni esikhula sibe yidijithali lapho izinkampani kanye nabantu ngabanye bencike kakhulu ku-inthanethi, kubalulekile ukuthi kube ne-firewall emiswe kahle ukuze kuvinjelwe ukuhlasela okungafaka engozini ukuphepha kwenethiwekhi noma idivayisi.

Ngaphezu kwalokho, ukusetshenziswa kwayo kudlulela kuwo womabili amazinga ebhizinisi nawomuntu siqu. Ngenkathi amabhizinisi amaningi etshala imali kuma-firewall athuthukile, abasebenzisi basekhaya bangazuza kuma-firewall eza bakhelwe kubo routers noma izinhlelo ezisebenzayo.

Ukungalungi kanye nemikhawulo yama-firewall

Nakuba ama-firewall enikeza umugqa wokuqala omuhle kakhulu wokuzivikela, anemikhawulo. Enye yezinto eziyinhloko ukuthi ama-firewall awakwazi ukuvikela ezinsongweni zangaphakathi, njengokusetshenziswa kwemishini USB utheleleke noma ukuhlaselwa okwenziwa abasebenzisi ngaphakathi kwenethiwekhi. Ukwengeza, amanye ama-firewall angacushwa ngokungalungile, okuwenza angasebenzi kahle.

  Amakhadi ehluzo e-NVIDIA asengozini yokuhlaselwa yiRowhammer ku-GDDR6

Enye i-drawback ukuthi yize i-firewall ikwazi ukuvimba ithrafikhi engenayo engagunyaziwe, ayisebenzi ngaso sonke isikhathi ngokumelene nezinhlobo ezithile I-malware engafinyelela inethiwekhi yakho ngoxhumo olusemthethweni. Ngakho-ke, kubalulekile ukuhlanganisa ukusetshenziswa kwe-firewalls nge ezinye izindlela zokuphepha, njenge-antivirus noma izixazululo zokuthola ukungena.

Izinhlobo ezisetshenziswa kakhulu ze-firewall

Namuhla, kunezinhlobo ezimbalwa zomlilo ezisetshenziswa kakhulu kumanethiwekhi nakumadivayisi:

  • I-Firewall Yokuhlunga Iphakethe: Ihlola amaphakheji ngalinye ngalinye ngaphandle kokuhlaziya okuqukethwe kwangempela.
  • I-Stateful Inspection Firewall: Hlola ithrafikhi ngokusekelwe esimweni sokuxhuma.
  • Uhlelo lokusebenza lwe-Firewall: Inikeza ukuhlaziya okujulile, ihlola okuqukethwe kwangempela kwamaphakheji.
  • I-Next Generation Firewall (NGFW): Ifaka izici ezithuthukile njengokutholwa kokungena kanye nokuphepha kwezendlalelo eziningi.

Ekugcineni, ukuvikela ngempumelelo inethiwekhi, kuhle ukusebenzisa inhlanganisela yezinhlobo ezahlukene zomlilo, ngaleyo ndlela udale isisombululo sokuphepha. multilayer.

Noma ngabe sikhuluma ngokuvikela amanethiwekhi ebhizinisi noma asekhaya, ama-firewall ahlala eyingxenye ebalulekile ukuphepha kwe-cyber, ukuhlinzeka ngokuvikelwa ezinhlobonhlobo zezinsongo zangaphandle kanye nokuthuthukisa ukuqapha kwethrafikhi yenethiwekhi.