TABLE OF CONTENTS A key component of any security policy is a well-designed DMZ. Because hosts in the DMZ are externally accessible over the Internet, your DMZ s design can make or break the overall security of your network.The DMZ can be the entry point through which malicious-minded individuals can enter your network.
There are two types of traffic to keep in mind when you re considering controlling traffic flowing to and from a DMZ: traffic originating from or destined for your internal network and traffic originating from or destined for the Internet. Although the connection point to the Internet is the most vital one, it is equally important to consider the access point to the internal network. Not only does this consideration provide a second layer of inspection for traffic traversing the DMZ to reach internal hosts, it also allows you to protect your network from malicious activity originating from within an occurrence that s growing more and more common.
In this chapter, we review the basics of Check Point firewalls to give you a solid understanding of how firewalls operate and the feature they make available to you. We then go into detail about several features of Check Point s firewalls that are critical to developing a well-secured DMZ.These details include how to best configure Check Point s features to secure your network perimeters. Finally, we document the steps to set up the DMZ from scratch using Check Point firewalls, from the setup of the physical interface to rulebase configuration.
Check...
