This paper examines the role of firewalls in protecting organizational networks from external threats. It explains core firewall functions — including packet filtering, IP address screening, and protocol management — and describes how router-based firewalls offer accessible protection for non-technical users. The paper also outlines a DMZ (demilitarized zone) architecture suited for school networks, separating web and email servers from internal systems. Finally, it addresses the financial considerations of enterprise firewall implementation, contrasting upfront hardware and installation costs with the potentially far greater expenses associated with a security breach, including legal fees, lost sales, and reputational damage.
A firewall is used to protect a person's or business's network from external threats. Firewalls may use packet filtering, user authentication, or client application authentication to protect the network. The actual process of protecting a network requires a firewall to filter incoming packet sizes, source IP addresses, protocols, and destination ports. Administrators of a network are able to enact firewall protection on a router, and this is often the first level of protection the network has against harm.
Along with serving as primary protection, firewalls in routers are also beneficial to those who are not skilled or knowledgeable in firewall configuration. Customers are able to install the firewall between their network and their external internet connection without outside assistance. Router-based firewall protection offers ease of use and serves as a primary source of security. Overall, it is far more practical to implement a router with firewall capabilities than to operate without one.
As a security solution for a school system, it will be important to protect administrative offices, classroom computers, web servers, and email servers from external risks. Multiple layers of firewall protection may be used to guard against these risks when placed in proper locations. Like many organizations, the school will operate using a demilitarized zone (DMZ). This architecture uses two separate firewalls: one to protect against incoming threats and one to protect against outgoing threats.
Inside the DMZ, web servers and email servers will receive optimum security. In the event of an external security breach, only these servers would be compromised rather than all school data. It is common for the DMZ to consist of two physically separate firewalls. The time delay introduced by these two firewalls becomes a useful tool in detecting a hacker, and will thus protect the school's computers, administrative offices, email servers, and web servers.
"Steps and expenses in corporate firewall deployment"
"Breach costs far outweigh firewall investment"
You’re 52% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.