FIREWALLS

Firewall Performance

Firewall Performance

Introduction

Firewalls are the most essential and important component in the network security set up of any organization. This is simply because they have a very important role to play in identifying and dealing with the threats of any attack from within and outside the network. The firewalls are also important as they manage the traffic flow and ensures that the all the suspicious data packets are identified and blocked before they cause any significant damage to the network. Therefore, it is important that the network administration keeps a constant check on the performance of the firewalls and make the necessary adjustments and modifications to update them for not compromising on the network security. The most important factor that cannot be neglected when it comes to firewalls is the throughput. Moreover, different traffic flows can have a different impact on the firewalls functionality.

Discussion

Throughput in terms of firewalls can be defined as the average rate of the successful packets that are delivered over any communication channel which is internet in most cases. It must be noted that it is indeed the relationship between the functionality of the firewall and the packet throughput that defines the performance of the firewall and its ability to secure the network (Zou, Towsley & Gong, 2004). The relationship between the packet throughput of the firewalls and functionality they offer is a complex one nonetheless.

The basic aim of the firewalls is to monitor the packet flow that goes within the network. In fact, to ensure high standards of security, the firewalls adapted in recent times examine the flow at packet level. This is done thereby using various different forms and techniques of packet filtering such as Deep Packet Inspection, several intuition methods and so forth. These methods usually adapt the conventional forms of firewalls with both the intuition detection and also prevention functionality (Sheth & Thakker, 2011, pp.3). This is performed through a thorough packet payload inspection and individual packet stream identification of the traffic on the per application and per user basis.

However, the fundamental ambition remains the fact that the packets containing Trojans, viruses, worms and so forth are identified and filtered before entering the network. During the process, a significant number of packets can be lost thus resulting in a decrease in the throughput. Therefore, it will be fair to say that the basic purpose or function that the firewall serves have a strong impact on the throughput. In addition, there are some of the other functionality factors that can have an impact on the packet throughput or get affected by it. These include overall traffic management and acontrol, translating port numbers (NAT) and addresses when needed, creating site-to-site VPNs thereby using the standards-based IPsec, and applying the principles of basic bandwidth management for the traffic (Moscola et al, 2003, pp.36).

Therefore, it must be noted that the throughput must be maintained at all costs irrespective of whatever solution is adapted for the proper firewall functionality that in turn ensure high ...