What is a Firewall? | Traditional + Next Generation

Join the Discord Server!
/ discord
---------------------
MY FULL CCNA COURSE
📹 CCNA - certbros.teachable.com/p/cisc...
FREE CCNA FLASHCARDS
🃏 CCNA Flashcards - certbros.com/ccna/flashcards
HOW TO PASS THE CCNA
📚 Get a great book - amzn.to/3f16QA5
📹 Take a video course - certbros.teachable.com/p/cisc...
✔ Use practice exams - www.certbros.com/ccna/Exsim
SOCIAL
🐦 Twitter - / certbros
📸 Instagram - / certbros
👔 LinkedIn - / certbros
💬 Discord - www.certbros.com/discord
Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------
So first, what is a firewall?
Now while most of the word is full of good-intentioned trustworthy people, there are a huge number of bad guys out there that want to take down your systems and get their hands on your hard-earned money!
With routers generally having minimal security features, you can quickly be at the mercy of the attackers.
This is where firewalls come in. Firewalls are designed to shield and protect our trusted networks from the untrusted.
The idea is that a firewall will block all the bad traffic from the attackers.
While at the same time, allow normal flow for the good traffic.
Most firewall, by default, block everything!
It doesn't matter if its traffic leaving the network or traffic entering the network. Everything is blocked.
The way we allow traffic to pass the firewall without being block is by adding firewall rules.
Next-gen firewalls take the same methods but then enhances them with more in-depth security features.
Generally speaking, this is what a next-generation firewall should include.
Application Level Inspection: So the firewall can identify and block risky application traffic.
Intrusion Prevention Systems or IPS: IPS will inspect the contents of the traffic and look for patterns or signatures of malicious or malware related traffic.
External Threat Intelligence: Next-generation firewalls can update themselves from external threat intelligence sources.
Computers can also have software-based firewalls. For example, the windows firewall is built-in and uses the same rule-based methods. Such as port, destination, and source IP addresses.
Having a firewall both on the network and the endpoints is important when creating a layer security posture.
#ccna #cisco #networking

[@bushybwoy]

I'm a CCNP for over a decade and always use your videos for interview prepping. Cheers.

[@Certbros]

Great to hear. Good luck with the interview! You're going to nail it!

[@amigazo3972]

I am not studying for CCNA, but for Security+. Your videos have made my learning so easy, so entertained. This has become one of my CZcams favourite channels by far! Thanks a lot :D

[@Certbros]

Thank you! Really happy to see these videos are helping. Good luck with the security+!

[@seetsamolapo5600]

Don't mind me just making myself some notes:
Firewall
- On a local network as an admin you have a great level of control on the devices and therefore can assure security but outside in the public internet you cannot
- shielding/protecting a trusted network by blocking unwanted traffic from networks, while allowing desired traffic from untrusted networks
- firewalls block everything by default, both outgoing traffic and incoming traffic
- traffic is allowed by adding traffic rules that specify source IP, destination, port and action
- Stateful firewalls monitor active connections therefore automatically allow response traffic if there was an initial request traffic even if the firewall denies all other incoming traffic
Endpoint firewalls are made to catch the bad traffic that might pass the network firewall or if the threat comes from internally, inside the network
- Having a firewall on both the network and endpoint is important to have a layered security posture and in case the threat is from an internal source

[@ardentdfender4116]

Your not the only channel I watch thats in the Networking Tech sphere on CZcams as I watch many for content need and educational awareness, but I can plainly say you do a far more fantastic job by a wide margin to make complex technical info seem easily understandable, learnable, teachable and easy to remember thus learning the information. While I may not always remember everything because it takes time to mentally digest new info, it is the best presented information that can be easily learned. On some topics in the future, you could do a deeper dive on some aspects of many topics. However, to initially learn a topic you cover it superbly.

[@Certbros]

Thank you Ardent! I've seen all if your comments and just want to say how much I appreciate huge support!

[@socratesmustafa6788]

I recommended your channel to our trainees at the company. The explanation is really easy to understand and I don't need to watch the video twice. I did understand a lot from your channel. Best regards from Germany 😀

[@sourakantimandal6026]

Best on the topic probably ! It entered my brain like "knife in butter"...😊😊😊😊

[@Certbros]

Haha! Thank you so much! Love the knife in butter comment 👌

[@mpls_link]

Simple, loud and very clear

[@Certbros]

Thanks!

[@GT-me1ke]

Great video, needed to refresh my knowledge! I did the PCNSA earlier this year and I highly recommend for anyone working with PA NGFW's.

[@Certbros]

Thanks GT! I haven't done that cert but I've heard great things. Might need to check it out!

[@freddymyboi5758]

I am so glad I have found your channel. All videos are very well explained. You have no idea how much you are helping me out. Thank you very much !

[@zackerythomas3675]

Quite clear without injecting too many other confusing detailed terminologies. Great videos for all levels of knowledge.
Even if I may know some of the topics in your videos I still watch them because different explanations from different sources do help me grasp a bigger picture.

[@Certbros]

Thanks for the comment Zackery! Glad you enjoyed my explanation.

[@mdhumayunrashid8809]

I agree!

[@itaybarok9405]

Wow that is a very interesting topic.
It is well known that one picture is valueable more than 1000 of words. You have dozens of great pictures on your videos and that is why they are only to the point yet so good. The images help understanding the overall idea.
I learned about the network firewall and about the firewall table that allowes the traffic requestd in its rows to pass and the replay of the request to come back and the else not. In addition I learned the important of end point firewall.
The example of the rooms and front house door was very useful to see. The network firewall is the front door and the room's doors are the end point firewalls. Perfect example.
Additionly I learned about NGFW and the importance of it from the security perspective.
Keep up with your sharing of knowledge.

[@shriniwassomvanshi2209]

This is the only technology channel I have suscribed.
The reason is,
its just awesome.

[@Certbros]

You're awesome! ☝

[@johnsonakanbi367]

Wow, insightful and clearly explained!

[@Certbros]

Thank you Johnson!

[@VijayaBaskarvvk]

Simplified yet precisely explained!!

[@Certbros]

Thank you Vijaya!

[@NK_Nibs]

Appriciate the simple way of explaination , Happy Learning. Thanks !

[@Certbros]

Thanks! 👍

[@lavanyabakshi7580]

Loved IT !! Thanks for clearing my doubts , CertBros ROCK !!!! can I also get the entire playlist for computer network

[@gabrielmatandiko1253]

Wow!! You are a genius. I cannot thank you enough. Great video how I wish you could make CCNP videos. Regardless, thank you

[@Certbros]

Thanks Gabriel! You very welcome. I'm just happy the videos helped.

[@antdx316]

incredible demonstration

[@EarzOnTunz]

Nice video! Thanks a lot. Great presentation!

[@emsheeranstudio3459]

Best explanation in the world bro ❤️❤️ hats off bro,you deserve 10million views for this creation 🥺🥺... Your the best bro may Allah help you

[@Certbros]

Thanks man! Really appreciate the kind words. Not quite at 10M views yet but you never know.

[@imthiyazkhan]

Great video ,appreciate your effort.

[@impetous7155]

u are awsome its understandable for every nation human

[@kalpsoni1873]

Nicely explained...Thanks...

[@Certbros]

Thank you Kalp!

[@yharbsquad2995]

Thank you this was great!

[@tyrelst.hillaireUTT2024]

Thank you . This helps alot.

[@ozamrani22]

Can you do videos on EDR ? Anti Virus ? IPS ? Mail Relay ? DLP ?WAF ? Proxy ?

[@Certbros]

I would love to make some videos on this! After the CCNA I'll start making some more cyber security stuff. 👍

[@orleydoss3171]

Great video and tutorial 👍.

[@Certbros]

Thanks 👍 Glad you liked it!

[@JustKeepBreathing01]

Very nicely explained :)

[@Certbros]

Thanks Simon! 👍

[@devintaylor9135]

very very very helpful!

[@mihaelahozmache7538]

Thank you! 🙏

[@hamismouloud3609]

Thanks, great video

[@zurimachluf7739]

awesome video!

[@Certbros]

Thanks Zuri! 👍

[@roseandmose]

Thank you❤

[@emerasude]

lovely, thanks, subscribed :)

[@user-me4et3bp7k]

Well done 👍

[@Certbros]

Thank you 👍

[@L1vR-1948]

Thanks for this video :-) 👍👍

[@Certbros]

No problem 👍Thanks for the comment!

[@shuvomist]

Thanks. Nice to Learn

[@Certbros]

You're welcome! Thanks for the comment.

[@alexanderzerr8110]

Thanks!

[@DeanCyber]

Hi, great videos. Do you mind me asking what software do you use for your videos? Thanks

[@Certbros]

No problem Dean. I use a combination of Adobe Premiere Pro and After Effects.

[@lalith_kumar_akhila2411]

excellent bro

[@Certbros]

Thanks man!

[@Raj75580]

You Rock 👏

[@ashishkumarseth9130]

please make a video of Using NGFW in ZTA(zero trust architecture).

[@Certbros]

Great suggestion. I'll add it to my suggested videos list. Thank you.

[@brandondean4201]

Thank you

[@kuunkee]

Good it clear

[@Certbros]

Thanks.

[@voidz3906]

i like the way u explane those things keep it up
can u talk about the DNS pls

[@Certbros]

Thanks! DNS is on my to-do list. Looking forward to that one!

[@voidz3906]

@@Certbros Cool keep it up🖤

[@Martin-ot7xj]

Hi, what is the best software firewall for Windows and small office?? And we can block port manually on it for more security??

[@Certbros]

Hi Martin. To be honest, the windows 10 firewall does a good job. Couple that with a good endpoint protection (anti-virus) and you should be good to go.

[@alurma]

thanks

[@Certbros]

Thank you!

[@franklyatambe1475]

This was interesting, is this level for beginners? I'm a bigger in networking and I wish to know the right steps to follow progressively , please.thank you

[@franklyatambe1475]

Sorry I meant to say I'm a bigginer

[@coltongarland1049]

What about finger printing

[@raisingelephant]

❤️👏

[@piazapetit145]

how do you ensure firewall goals do not overlap?

[@Certbros]

Sometime firewall rules do overlap. They can get pretty messy after a while if you're not carful. A firewall will read the rules from top to bottom and the first matching rule will be applied.

[@piazapetit145]

Thank you

[@vasanthtyson4045]

Have a great day... :)

[@leothalion3983]

Hey Guy, do you have a configuration video on this?

[@Certbros]

Sorry Jose, not yet. What kind of video are you looking for?

[@leothalion3983]

How to configure a Cisco ASA

[@asmaan98ify]

here i am, getting ready for an interview for an internship...

[@Certbros]

How did the interview go Syaheer? Did you get it?

[@Seraph89_]

Testing

[@Seraph89_]

Thank you. I can finally comment again.

[@chpappis]

1.5x speed at least to be viewable

[@weactweimpactcharityassoci3964]

You could teach a baby and he would absolutely understand the topic

[@djemarkayswalkingonawire4721]

2 many commercial interruptions