Kwihlabathi apho ukhuseleko lwe-cyber luhlala luvela, ukwazi iindidi ezahlukeneyo zomlilo kunye nendlela ezisebenza ngayo kubalulekile ekukhuseleni uthungelwano kunye nezixhobo zethu. Ezi zixhobo zomlilo zisebenza njengomgca wokuqala wokukhusela ngokuthintela izisongelo ze-cyber kunye nokufikelela okungagunyaziswanga kwiinkqubo zethu, kwaye ukubaluleka kwabo kuye kwanda ngokuhambelana nokuxhatshazwa kokuhlaselwa okufuna ukuphula ukhuseleko lwemibutho kunye nabasebenzisi bokugqibela.
Ukutyhubela iminyaka, iindonga zomlilo ziye zavela kwizihluzi zeepakethe ezilula ukuya kwizisombululo eziphambili ezidibanisa ukuthintela ukungena, ukuhluzwa kwesicelo, kunye nokunye. Kweli nqaku, siza kudiliza iindidi eziphambili zomlilo ezikhoyo, iimpawu zazo, izinto eziluncedo kunye nezingeloncedo, kunye nendlela eziye zavela ngayo ukujongana nezona zoyikiso zinzima ze-cybersecurity.
Yintoni i-firewall kwaye isebenza njani?
Un firewall, okanye i-firewall, sisixhobo sokhuseleko esilawula izithuthi ezingenayo neziphumayo kuthungelwano ngenjongo yokuvumela kuphela ezo ziqhagamshelo zikhuselekileyo kunye nokuthintela ezinokuba yingozi. Ngokusebenzisa isethi yemithetho echazwe kwangaphambili, i-firewall inokuhlalutya i-traffic data, iyahlule ibe yinto ekhuselekileyo kunye nengekho, kwaye isebenze ngokufanelekileyo. Nokuba ikwinethiwekhi okanye kwinqanaba lesixhobo somntu ngamnye, umsebenzi wayo ophambili kukukhusela izenzo ezikhohlakeleyo ezisongela ingqibelelo yedatha kwinethiwekhi.
I-firewall ingenza izigqibo zokuvumela okanye ukukhanyela ukufikelela ngokusekelwe kwiiparamitha ezahlukeneyo, ezifana Iidilesi ze-IP, i kwiichweba isetyenzisiwe okanye ide imigaqo-nkqubo abasebenzi kunxibelelwano. Ukongeza, ezinye ii-firewall eziqhubela phambili zivumela ukuhlolwa kumanqanaba anzulu, ukuseka ukhuseleko olongezelelweyo.
Iintlobo ze-Firewall ngokusekelwe kwindawo kunye nesicelo
Ngokuxhomekeke apho i-firewall ifakwe khona, sinokuzahlula zibe ziintlobo ezimbini eziphambili: i-hardware firewall kunye ne-software firewall.
I-firewall ye-Hardware
Un i-firewall ye-hardware Ifakwe kwisixhobo somzimba, esihlala sibekwe kwi-perimeter okanye kufuphi nendawo yokungena yenethiwekhi. I-firewall ye-Hardware idla ngokufunyanwa kwii-router okanye kwiikhompyuter ezinikezelweyo kwaye zikhusela zonke izixhobo eziqhagamshelwe kwinethiwekhi. Oku kuvumela izixhobo ezininzi ukuba zixhamle kukhuseleko lwe-firewall ngaphandle kokufaka isoftware yomntu ngamnye kubo.
Ku uthungelwano lweshishini, imizi-mveliso okanye iqumrhu, i-firewall ye-hardware idla ngokuba yomelele kwaye ifuna a inqanaba eliphezulu ulwenziwo ngamagcisa okhuseleko. Ngelixa zibiza kakhulu kwaye zintsonkothile ukulawula, zibonelela ngokhuseleko olugqwesileyo lweemeko apho iileya ezininzi zokhuselo ziyimfuneko.
I-firewall yesoftware
Kwelinye icala, i isoftwe firewall Ifakwe ngokuthe ngqo kwizixhobo ezizimeleyo, ezinjengeekhompyuter okanye iiseva. Ngokuqhelekileyo idityaniswe kwiinkqubo zokusebenza phantse zonke izixhobo, kwaye injongo yayo kukukhusela oko isixhobo esithile zohlaselo. Nangona ngokuqhelekileyo ayikhuseli inethiwekhi yonke, inokuba sisixhobo esiluncedo kakhulu ngokudibanisa ne-firewall ye-hardware.
Enye yeenzuzo eziphambili ze-firewall yesoftware kukulula kwayo ukufakela kunye nokukwazi kwayo ukusinika ulawulo oluthe ngqo kwi-traffic engenayo nephumayo kwisixhobo sethu. Nangona kunjalo, ngenxa yokuba isebenza kwisixhobo ngokwayo, inokusebenzisa izixhobo kwaye icothise inkqubo.
Iintlobo ze-firewall ngokwendlela yokucoca i-traffic
Ngaphandle kwendawo ezikuyo, iifirewall zinokuhlelwa ngokusekwe kwindlela abaphatha ngayo itrafikhi yenethiwekhi. Okulandelayo, siza kunika iinkcukacha ngeentlobo ezahlukeneyo ze-firewall ngokweendlela zokucoca.
I-Firewall yokucoca ipakethi
Le yenye yezona ntlobo zisisiseko, kwaye umsebenzi wayo kukwenza izigqibo ezisekelwe kwi Iidilesi ze-IP, kwiichweba o imigaqo-nkqubo. Le nkqubo ayenzi uhlolo olunzulu lomxholo okanye igcine ubume boqhagamshelwano. Nangona bekhawuleza kwaye besebenzisa izixhobo ezimbalwa, ukhuseleko lwabo lulinganiselwe, kuba nayiphi na i-traffic edlula kwi-port evunyiweyo ingaba nekhowudi enobungozi.
Iproxy firewall
Olu hlobo lomlilo lusebenza njenge umrhwebi phakathi kwenethiwekhi yangaphakathi nangaphandle, ukuthintela ukudibanisa ngokuthe ngqo phakathi kwezixhobo. Ivavanya iipakethi zolwazi olungenayo kwaye ivumela ufikelelo kuphela ukuba iyadibana iindlela zokhuseleko. Nangona olu hlobo lwe-firewall lunikeza ukhuseleko olukhulu, lunokunciphisa kwakhona ukusebenza ngenxa yokulungiswa okongeziweyo kweepakethe.
I-Firewall yoHlolo oluthembekileyo
I-firewall yokuhlola esemgangathweni ayijongi kuphela i-header yepakethi, kodwa iphinda ihlalutye yayo estado eyiyo ngaphakathi koqhagamshelwano. Oku kuvumela amazibuko ukuba avulwe kwaye avalwe ngamandla, ukuqinisekisa ukhuseleko olungcono. Ukukwazi kwayo ukubona kunye nokukhumbula uxhulumaniso lwangaphambili kuyenza ibe sisisombululo esikhuseleke ngakumbi kune-firewall esemgangathweni yokucoca ipakethi.
I-Firewall yesiZukulwana esilandelayo (NGFW)
El I-Firewall yesiZukulwana esilandelayo ayisebenzi nje kuphela imisebenzi yemveli yomlilo, kodwa iqhubela phambili, ibandakanya izixhobo ezongezelelweyo zokhuseleko ezifana ukuthintela ukungena, i ukuqondwa kwesicelo esiphezulu kunye nokukwazi ukuhlalutya i-traffic kumanqanaba aphezulu emodeli ye-OSI. Olu hlobo lwe-firewall luluncedo kakhulu kwiinkampani ezinkulu ezifuna ukhuseleko olubanzi ngokuchasene nezoyikiso eziphezulu ezifana ne-malware, ukuxhatshazwa, kunye nokuhlaselwa kwesicelo.
Umahluko phakathi kwee-firewall ngokwesakhiwo sabo
Enye indlela yokuhlela i-firewall kukwakhiwa kwazo. Iifirewall zinokuphunyezwa njengehardware, isoftware, okanye iinkonzo zelifu. Ngezantsi siqhekeza iintlobo eziphambili zesakhiwo somlilo esikhoyo ngoku:
- I-firewall ye-Hardware: Ezi firewall zihlala zifumaneka kwizixhobo zomzimba ezizinikeleyo ezikhusela izixhobo ezininzi kuthungelwano. Ngelixa zinamandla, zifuna abasebenzi abanezakhono zokuphumeza kwaye banokuthintelwa yi-hardware abaqhuba kuyo.
- I-Firewall yeSoftware: Zilula ukuphumeza kwaye zifakwe ngqo kwisixhobo ukuze zikhuselwe. Nangona basebenzisa izixhobo zenkqubo, zifanelekile kubasebenzisi ngabanye kunye namashishini amancinci.
- Cloud Firewall: Zizisombululo eziguquguqukayo kakhulu ezikhusela idatha kunye nezixhobo kwiindawo zefu. Basebenzisa izibonelelo ze-virtualization kwaye benzelwe ukusebenza kwiindawo ezinobungozi, bezenza zibe zilungele amashishini afudusa iziseko zawo efini.
Iifirewall zamafu ziyaqhubeka ukufumana ukuthandwa njengoko zibonelela ukhuseleko olunomngcipheko kunye nokulungelelanisa iimfuno zeenkampani ezisebenza kwiindawo zamafu. Ukongeza, ukuguquguquka abakubonelela kuvumela ukuhanjiswa ngokulula naphi na emhlabeni.
Iimeko ezisebenzayo kunye nemizekelo
Ngokuxhomekeke kwimeko, ezinye iindidi ze-firewall zifanelekile ngakumbi kunezinye. Ngezantsi kukho imizekelo yabameli:
Ipakethe yoShishino oluNcinci loHluzo lweFirewall: Amashishini amancinci amaninzi akhetha olu hlobo lwe-firewall ngenxa yeendleko eziphantsi kunye nokulula kokuphunyezwa, nokuba alunikezeli izinga eliphezulu lokukhusela.
Iifirewall zokuhlola impilo kwimibutho emikhulu yezemfundo: Iiyunivesithi zihlala zifuna ulungelelwaniso phakathi kokhuseleko kunye nokusebenza, kwaye i-firewall yokuhlola isemthethweni ibavumela ukuba balawule umthamo omkhulu wedatha ngaphandle kokubeka esichengeni ukusebenza kakuhle.
Iifirewall ze-NGFW kwiinkampani zamazwe ngamazwe: Amashishini amakhulu alawula iziseko zophuhliso ezibanzi ahlala ekhetha isizukulwana esilandelayo somlilo ukukhusela kwizisongelo eziphambili kunye nokuqinisekisa ukhuseleko olubanzi.
Iifirewall zisiqwenga esisisiseko kwihlabathi le-cybersecurity yanamhlanje. Njengoko sele sibonile, akukho lunye uhlobo lwe-firewall olulungele zonke iimeko. Iziko ngalinye, nokuba likhulu okanye lincinci, kufuneka lihlole iimfuno zalo phambi kokuba lithathe isigqibo ngesisombululo esithile. Ngokuhamba kwexesha, ukuvela kwee-firewall kuye kwavumela izithintelo zokhuseleko ukuba zande kwaye, nangona kungekho sisombululo sigqibeleleyo kuzo zonke izoyikiso, zisisixhobo esiluncedo kakhulu sokunciphisa umngcipheko.
Ndingumntu othanda itekhnoloji ojike umdla wakhe we "geek" waba ngumsebenzi. Ndichithe ngaphezulu kweminyaka eli-10 yobomi bam ndisebenzisa itekhnoloji yokusika kwaye ndikhenkceza ngazo zonke iintlobo zeenkqubo ngenxa yokufuna ukwazi okumsulwa. Ngoku ndiqeqeshelwe ubugcisa bekhompyutha nakwimidlalo yevidiyo. Oku kungenxa yokuba ngaphezu kweminyaka emi-5 ndibhalela iiwebhusayithi ezahlukeneyo kwitekhnoloji kunye nemidlalo yevidiyo, ndisenza amanqaku afuna ukukunika ulwazi oludingayo ngolwimi oluqondakalayo kuye wonke umntu.
Ukuba unayo nayiphi na imibuzo, ulwazi lwam lusuka kuyo yonke into enxulumene nenkqubo yokusebenza yeWindows kunye ne-Android yeefowuni eziphathwayo. Kwaye ukuzinikela kwam kukuwe, ndihlala ndikulungele ukuchitha imizuzu embalwa kwaye ndikuncede usombulule nayiphi na imibuzo onokuba nayo kweli lizwe le-intanethi.