SANS Institute

the most trusted source for computer security training, certification and research

SANS InfoSec Reading Room - Firewalls & Perimeter Protection

<<Reading Room Home

Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.

Featuring 58 papers as of Sep 5, 2008

Check Point firewalls - rulebase cleanup and performance tuning: Barry Anderson; September 5, 2008; - download paper

Performing Egress Filtering: Dennis Distler; August 20, 2008; - download paper

Microsoft Vista Firewall; Dissected: Phil Kostenbader & Bob Rudis; August 9, 2007; - download paper

Redefining your perimeter with MPLS - an integrated network solution: Vijay Sarvepalli; July 17, 2007; - download paper

Don’t Just Patch, Protect!: Richard Sillito; May 1, 2007; - download paper

XML Firewall Architecture and Best Practices for Configuration and Auditing: Don Patterson; April 30, 2007; - download paper

Egress Filtering FAQ: Chris Brenton; January 18, 2007; - download paper

Firewall Analysis and Operation Methods: Kim Cary; October 23, 2006; - download paper

Wired 802.1x Security: Mohammed Younus; July 27, 2006; - download paper

Exploiting BlackICE When a Security Product has a Security Flaw: Peter Gara; July 9, 2005; - download paper

Regaining Control over your Mobile Users: Shelly Biller; June 23, 2005; - download paper

Ethical Deception and Preemptive Deterrence in Network Security: Brian McFarland; May 17, 2005; - download paper

Using Secure Sockets Layer bridging and content filtering mechanisms to provide defense in-depth when publishing SSL encrypted web hosts.: John Hallberg; May 5, 2005; - download paper

Utilizing Static Packet Filters to Enhance Network Security: Scott Foster; January 17, 2005; - download paper

3Com Distributed Embedded Firewall: Kyle Kelliher; July 25, 2004; - download paper

Netfilter and IPTables: A Structural Examination: Alan Jones; May 2, 2004; - download paper

Support guides for the Cyberguard Firewall Appliance: Chris Bodill; November 19, 2003; - download paper

Configuring Watchguard Proxies: A Guideline to Supplementing Virus Protection and Policy Enforcement: Alan Mercer; November 6, 2003; - download paper

High Availability Firewall - WatchGuard Firebox Vclass V60: Wee Leng Chia; November 6, 2003; - download paper

Private Internet Exchange: The Fastest Firewall in the World?: Keith Cancel; October 31, 2003; - download paper

Sidewinder 5.1 Split DNS Architecture: Charlene Keltz; October 31, 2003; - download paper

Using Open Source to Create a Cohesive Firewall/IDS System: Thomas Dager; October 31, 2003; - download paper

Active Net Steward - Distributed Firewall: Daniel L. Safeer; October 31, 2003; - download paper

Cisco Router Hardening Step-by-Step: Dana Graesser; October 31, 2003; - download paper

IPSec VPN Using FreeBSD: Greg Panula; October 31, 2003; - download paper

Comparison Shopping for Scalable Firewall Products: Laura Keadle; October 31, 2003; - download paper

Achieving Defense-in-Depth with Internal Firewalls: Steve Bridge; October 31, 2003; - download paper

Proxies and Packet Filters in Plain English: Scott Algatt; October 31, 2003; - download paper

Personal Firewalls - Protecting the Home Internet User: Bonnie McDougall; October 31, 2003; - download paper

Application Level Content Scrubbers: Benjamin Sapiro; October 31, 2003; - download paper

Cisco Way: Joseph S. White; October 31, 2003; - download paper

Disconnect from the Internet - Whale's e-Gap In-Depth: Kevin Gennuso; October 31, 2003; - download paper

Protecting the Next Generation Network -Distributed Firewalls: Robert Gwaltney; October 31, 2003; - download paper

Fighting Cyber Terrorism - Where Do I Sign Up?: Pamela Dodge; October 31, 2003; - download paper

A Layer-7 Secure Security Posture: Paul Vinciguerra; October 31, 2003; - download paper

CBAC - Cisco IOS Firewall Feature Set Foundations: Evan Davies; October 31, 2003; - download paper

Building an IPv6 Firewall with OpenBSD: Eric Millican; October 31, 2003; - download paper

A Review Of Floppy-Based Firewalls And Their Security Considerations: Sean Closson; October 31, 2003; - download paper

Protecting the Network without Breaking the Bank: Gerald Clevenger; October 31, 2003; - download paper

The Firewall has been Installed, Now What? Developing a Local Firewall Security Policy: Richard Walker; October 31, 2003; - download paper

Getting the Most out of your Firewall Logs: Matt Willard; October 31, 2003; - download paper

Configuring a NetScreen Firewall: Best practice guideline for the basic setup of a NetScreen firewal: Robert Bayley; October 31, 2003; - download paper

The Installation and Configuration of a Cisco PIX Firewall with 3 Interfaces and a Stateful Failover: Steve Textor; October 31, 2003; - download paper

Using ISA Server Logs to Interpret Network Traffic: Brian McKee; October 31, 2003; - download paper

IPFilter: A Unix Host-Based Firewall: Dana Price; October 31, 2003; - download paper

Securing Extranet Connections: Jeff Pipping; October 31, 2003; - download paper

Securing Solaris Servers Using Host-based Firewalls: William Kirt Karl; October 31, 2003; - download paper

Denial of Service Attacks and the Emergence of "Intrusion Prevention Systems": Adrian Brindley; October 31, 2003; - download paper

Case Study: Deploying and Configuring a Netscreen 100 Firewall Appliance to Secure the Network: James Murphy; October 31, 2003; - download paper

Using The Cisco Pix Device Manager: Jason Holcomb; October 31, 2003; - download paper

Designing a DMZ: Scott Young; October 31, 2003; - download paper

Choosing The Best Firewall: Gerhard Cronje; October 31, 2003; - download paper

Scanning for viruses: Dan Boyd; October 31, 2003; - download paper

Build your own firewall using SuSE Linux: A mechanics guide.: Paul ONeil; October 31, 2003; - download paper

Long Distance Failover - High Availability using Cisco PIX Firewall: Chris Ellem; October 31, 2003; - download paper

Secure Configuration of a Cisco 837 ADSL firewall router: Brett McIntosh; October 31, 2003; - download paper

Migrating Services Between Firewall Technologies: Andrew Barratt; October 31, 2003; - download paper

Solaris 8 and Checkpoint NG FP3 install with SSH, JASS and Syslog: Mike Shannon; October 31, 2003; - download paper

SANS Reading Room

Check Them Out!

This is hands-down, the premiere training opportunity.
- Dan Mather, JICPAC

SEC502 Perimeter with bad guy

Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT