Download User Manual - GENESYS SOFTWARE

Introduction to the Technology
2. Introduction to the Technology
Before exploring the Astaro Security Linux Security Solution in detail,
it may be helpful to take an overview of network and security technology in general. In particular, it is important to understand the
serious risks that unprotected systems face as well as where and how
to deploy this security system to mitigate these risks.
Networks
The Internet is already well established as a vital communications
medium and a key marketplace for both traditional and new services.
Since its inception, its size has multiplied, with domain name growth
between 1995 and 2002 reaching almost exponential proportions.
Computers on this worldwide network communicate using the
Internet Protocol (IP), as well as various higher-level protocols
such as TCP, UDP, and ICMP. IP addresses uniquely identify each of
the computers reachable on the network.
The Internet itself is a collection of smaller networks of various kinds.
When two or more networks are connected, a number of issues arise
which are dealt with by devices such as routers, bridges, and
gateways. A firewall is another such device, designed with security in
mind.
As a rule, three kinds of network meet at the firewall:
•
An external or Wide Area Network (WAN)
•
An internal or Local Area Network (LAN)
•
A De-Militarized Zone (DMZ)
An example configuration is shown on the next page.
10