Introduction

This chapter will focus on another software solution for network security. Check Point Software s FireWall-1 is a product that offers an intuitive configuration interface and strong security measures. FireWall-1 provides good security for your network without complex configuration tasks.

FireWall-1 Features

The functionality and security provided by the features of a particular software package are what determines whether you will choose that software on your network. The features in FireWall-1 address a number of elements of enterprise security, which are integrated and managed through the components that make up the firewall product.

FireWall-1 offers a modular, scalable architecture, allowing you to add additional modules to the firewall and thereby add more features. For example, FireWall-1 provides the ability to add Virtual Private Network (VPN) services through a separate, optional module. This module must be purchased separately from FireWall-1, as must several others, which we ll discuss in the sections that follow. The primary components that come with FireWall-1 include:

• Graphical User Interface (GUI) Console

• Management Server

• Firewall Module

These components allow you to design and implement security policies that can be centrally managed through a single console.

The Graphical User Interface is used to design and manage your security policy, and serves as a Policy Editor. As shown in Figure 11.1, the GUI Console allows you to create rules for various network objects. These objects include such network elements as gateways, hosts, and users, so that you can create security policies for them at a granular level. As we ll see...