Firewall Types & Secure Communication

Question 1

Network-Based Firewall

Answer 1

Network-based firewall → security device placed at the network perimeter that filters inbound and outbound traffic based on rules such as Internet Protocol addresses, ports, and protocols to prevent unauthorized access.

Question 2

UTM

Answer 2

Unified threat management (UTM) → all-in-one security appliance, sometimes called a web security gateway, that combines firewalling, intrusion prevention, antivirus, web filtering, and other security functions into a single device.

Question 3

NGFW

Answer 3

Next-generation firewall (NGFW) → advanced firewall that operates at Open Systems Interconnection layer 7, allowing it to inspect application-level traffic, enforce user-based policies, and detect modern threats beyond simple port filtering.

Question 4

WAF

Answer 4

Web application firewall (WAF) → firewall designed to protect web applications by filtering and monitoring Hypertext Transfer Protocol traffic, defending against attacks such as structured query language injection and cross-site scripting.

Question 5

VPN

Answer 5

Virtual private network (VPN) → secure communication method that creates an encrypted tunnel over an untrusted network, allowing remote users or networks to communicate as if they were directly connected.

Question 6

VPN Concentrator

Answer 6

VPN concentrator → dedicated device or integrated firewall feature that manages and terminates large numbers of virtual private network connections, handling encryption, authentication, and session management.

Question 7

IPsec

Answer 7

Internet Protocol security (IPsec) → suite of protocols used to encrypt and authenticate Internet Protocol traffic, providing confidentiality, integrity, and authentication at the network layer.

Question 8

SSL/TLS VPN

Answer 8

Secure sockets layer and transport layer security virtual private network (SSL/TLS VPN) → virtual private network that uses browser-based or client-based encrypted connections, commonly used for remote user access without full network exposure.

Question 9

Site-to-Site IPsec VPN

Answer 9

Site-to-site Internet Protocol security virtual private network → permanent encrypted tunnel that securely connects two networks over the internet, allowing systems at both locations to communicate as if on the same internal network.

Question 10

SD-WAN

Answer 10

Software-defined wide area network (SD-WAN) → wide area network technology optimized for cloud use that dynamically routes traffic across multiple links based on performance, cost, and application needs.

Question 11

SASE

Answer 11

Secure access service edge (SASE) → A next generation VPN with firewalls, zero trust features, and SD-WAN (cloud based networking)