Li m u Ngy nay, mi doanh nghip u c h thng mng trong qu trnh qun l, iu hnh cc hot ng sn xut kinh doanh, qun

l nhn s, giao dch trc tuyn. Internet cng pht trin, nhu cu s dng cc dch v trc tuyn ngy cng tng, ri ro b nh mt d liu t bn ngoi ngy cng ln do vn bo mt l yu t quan trng. Vic gia c bo mt h thng mng nhm ngn chn cc cuc tn cng nhm ph hoi hay nh mt d liu quan trng t bn ngoi. Nhm khc phc vn ny, hng Cisco-Systems nghin cu v pht trin cho ra sn phm Cisco ASA Firewall nhm bo v h thng mng doanh, gia tng tnh n nh v m bo h thng mng hot ng tt nht.

Tng quan v firewall Firewall l thit b iu khin chnh sch truy cp gia hai hay nhiu min bo mt. Mc tiu ca firewall nhm bo v cc d liu quan trng trong mng doanh nghip. H thng mng phi c chia thnh vng tin cy v vng khng tin cy, vng tin cy cn c gi l min bo mt, trong min bo mt tt c mi truy cp t bn ngoi u c ngn chn bo v. Thng thng firewall c t gia vng tin cy v vng khng tin cy khi cc lu thng t bn ngoi i vo bn trong u phi i qua bc tng la firewall, v vy firewall phi l con ng duy nht lu lng i ra v i vo vng tin cy t bn ngoi, v firewall phi c cu hnh gia c c th thc thi vic ngn chn tn cng. Trong thc t, ch mt min bo mt th khng nu mun m rng m hnh mng bng vic thm Data Center th phi c thm mt min bo mt, Nu c thm Web Server th ta nn t vo vng phi qun s DMZ. C hai cch chia vng: cch chia vng vt l v cch chia vng logic: Cch chia vng vt l yu cu mi cng ca firewall phi kt ni vi mt h tng mng ring bit. Cch chia phn vng logical bng cch chia VLANs, VSANs, MPLS VPN. Cch phn vng vt l c u im bo mt hn nhng cng tn km chi ph mua thit b hn cch phn vng logic.

Cc cng ngh ca firewall