Добавил:
Upload Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:
Методические указания ИБ-1.doc
Скачиваний:
2
Добавлен:
01.07.2025
Размер:
482 Кб
Скачать
☆

8. Find more information about different types of firewalls and complete a table of their advantages and disadvantages.

Type of a firewall

Advantages

Disadvantages

Unit 10 Network Architecture

Warm Up

1. What do you know about OSI reference model?

2. What is a full form of TCP/IP Network models?

3. How do you understand the term tunneling?

Reading

1. Read the text below and fill in the gaps in the following sentences.

1) Network architecture is designed around ……………………….

2) A single protocol can travel over more than one physical layer because it has been dissociated from………………………….

3) ……………….. created an OSI reference model so that they could logically group the similarly working components of the network into various layers of the protocol.

4) Firewalls operate at ……………. to use different criteria to restrict traffic.

Osi and tcp/ip Network Models

To understand how firewalls work it helps to understand how the different layers of a network interact. Network architecture is designed around a seven layer model. Each layer has its own set of responsibilities, and handles them in a well-defined manner. This enables networks to mix and match network protocols and physical supports. In a given network, a single protocol can travel over more than one physical support (layer one) because the physical layer has been dissociated from the protocol layers (layers three to seven). Similarly, a single physical cable can carry more than one protocol. OSI reference model came into existence way before the TCP/IP model was created. Advance research project agency (ARPA) created an OSI reference model so that they could logically group the similarly working components of the network into various layers of the protocol. But after the advent of the Internet, there arose the need for a streamlined protocol suite, which would address the need of the ever-growing Internet. So the Defense Advanced Research Project Agency (DARPA) decided to create the TCP/IP protocol suite. This was going to address many, if not all the issues that had arisen with the OSI reference model. The first four layers are so closely analogous to OSI layers however that interoperability is a day to day reality.

Firewalls operate at different layers to use different criteria to restrict traffic. The lowest layer at which a firewall can work is layer three. In the OSI model this is the network layer. In TCP/IP it is the Internet Protocol layer. This layer is concerned with routing packets to their destination. At this layer a firewall can determine whether a packet is from a trusted source, but cannot be concerned with what it contains or what other packets it is associated with. Firewalls that operate at the transport layer know a little more about a packet, and are able to grant or deny access depending on more sophisticated criteria. At the application level, firewalls know a great deal about what is going on and can be very selective in granting access.

TCP/IP Model vs OSI Model

TCP/IP Reference Model

OSI Reference Model

Defined before advent of internet

Defined after the advent of Internet

Service interface and protocols are clearly distinguished

Service interface and protocols were not clearly distinguished before

Internet working not supported

TCP/IP supports Internet working

Strict layering

Loosely layered

Protocol independent standard

Protocol Dependent standard

Less Credible

More Credible

All packets are reliably delivered

TCP reliably delivers packets, IP does not reliably deliver packets