A
firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules.
Firewalls have been a first line of defense in network security for over 25 years. They establish a barrier between secured and controlled internal networks that can be trusted and untrusted outside networks, such as the Internet.
A firewall can be hardware, software, or both.
Proxy firewall
An early type of firewall device, a proxy firewall serves as the gateway from one network to another for a specific application. Proxy servers can provide additional functionality such as content caching and security by preventing direct connections from outside the network. However, this also may impact throughput capabilities and the applications they can support.
Stateful inspection firewall
Now thought of as a “traditional” firewall, a stateful inspection firewall allows or blocks traffic based on state, port, and protocol. It monitors all activity from the opening of a connection until it is closed. Filtering decisions are made based on both administrator-defined rules as well as context, which refers to using information from previous connections and packets belonging to the same connection.
Unified threat management (UTM) firewall
A UTM device typically combines, in a loosely coupled way, the functions of a stateful inspection firewall with intrusion prevention and antivirus. It may also include additional services and often cloud management. UTMs focus on simplicity and ease of use.
Next-generation firewall (NGFW)
Firewalls have evolved beyond simple packet filtering and stateful inspection. Most companies are deploying next-generation firewalls to block modern threats such as advanced malware and application-layer attacks.
According to Gartner, Inc.’s definition, a next-generation firewall must include:
- Standard firewall capabilities like stateful inspection
- Integrated intrusion prevention
- Application awareness and control to see and block risky apps
- Upgrade paths to include future information feeds
- Techniques to address evolving security threats
While these capabilities are increasingly becoming the standard for most companies, NGFWs can do more.
Threat-focused NGFW
These firewalls include all the capabilities of a traditional NGFW and also provide advanced threat detection and remediation. With a threat-focused NGFW you can:
- Know which assets are most at risk with complete context awareness
- Quickly react to attacks with intelligent security automation that sets policies and hardens your defenses dynamically
- Better detect evasive or suspicious activity with network and endpoint event correlation
- Greatly decrease the time from detection to cleanup with retrospective security that continuously monitors for suspicious activity and behavior even after initial inspection
- Ease administration and reduce complexity with unified policies that protect across the entire attack continuum
Technical Information
- Firewall Protection: Denial of Service (DoS)
- Firewall Protection: Malformed Packet Attack
- Firewall Protection: DNSGuard
- Firewall Protection: FloodGuard
- Firewall Protection: FragGuard
- Firewall Protection: MailGuard
- Firewall Protection: IPVerify
- Firewall Protection: TCP Intercept
Interfaces/Ports
- Total Number of Ports: 5
- Management Port: Yes
- Number of Network (RJ-45) Ports: 5
Network & Communication
- Ethernet Technology: Ethernet
- Network Standard: 10/100Base-TX
- Network Standard: 10Base-T
Management & Protocols
Memory
- Standard Memory: 16 MB
- Memory Technology: SDRAM
- Flash Memory: 8 MB
Power Description
- Input Voltage: 110 V AC
- Input Voltage: 220 V AC
- Power Source: Power Supply
Physical Characteristics
- Form Factor: Desktop
- Height: 1.0"
- Width: 6.3"
- Depth: 5.5"
- Weight (Approximate): 12.00 oz
Miscellaneous
- Additional Information:
- Cisco PIX 501 chassis
- Software
- The integrated DHCP server supports up to 32 DHCP leases.
- Virtual Private Networking (VPN)
- Network Address Translation (NAT)
- Denial-of-Service (DoS) Attack Prevention
- Simple, Web-Based Management with PIX Device Manager (PDM)
- System bus: Single 32-bit, 33-MHz PCI
- VPN Accelerator Card Plus (VAC+) Support: No
- Failover Support: No
Operating:
- Shock: 250 G, < 2 ms
- Vibration: 0.41 Grms2 (3-500 Hz) random input
Nonoperating:
- Shock: 65 G, 8 ms
- Vibration: 1.12 Grms2 (3-500 Hz) random input
- Certifications & Standards: Safety:
- UL1950
- CAN/CSA-C22.2 No. 60950-00
- IEC60950
- EN60950
EMC:
- EN55022 Class B
- CISPR22 Class B
- AS/NZS 3548 Class B
- VCCI Class B
- EN55024
- EN50082-1
- EN61000-3-2
- EN61000-3-3,
Warranty
For more, visit
Cisco Firewalls Store
