Chapter 2 - Dissecting the NetScreen Firewall

Abstract

This chapter takes a look at the various components that compose a NetScreen firewall. The NetScreen security product line contains an various security products. The chapter describes the core technologies that make up the NetScreen firewall product line. Zones are a core part of the NetScreen firewall. They allow the administrator to divide networks into logical separations. This allows the simplification of the policy creation process by clearly allowing or denying access to different network segments based upon their applied zones. NetScreen bends the idea of a firewall with the use of virtual routers. Virtual routers allow the separation of all of the routing domains into separate logical entities. This enables a firewall to employ the firewall as a true router without compromising security. The NetScreen firewall product again bends the traditional look of a firewall by acting as a transparent device in the network, providing full firewalling features. Thus, the NetScreen firewall product line provides a complete selection of firewalling products that can cover any company's needs. Each product is tailored to provide exactly what is needed for almost every possible solution for an enterprises firewall needs. The NetScreen Security Manager (NSM) product brings all of the firewalls together to be managed under one single solution. It provides all of the various solutions to centrally manage the firewall products.