NIST Guidelines on firewalls and firewall policy

Hi I am looking for detail of NIST Guidelines on firewalls and firewall policy, is it available on the net?

NIST stand for National Institute of Standards and Technology which is a non-regulatory agency of the United States Department of Commerce located in Gaithersburg, Maryland.

NIST has following seven standing committees:
Visiting Committee on Advanced Technology (VCAT)
Technical Guidelines Development Committee (TGDC)
National Construction Safety Team Advisory Committee (NCST Advisory Committee)
Manufacturing Extension Partnership National Advisory Board (MEPNAB)
Information Security and Privacy Advisory Board (ISPAB)
Baldrige National Quality Program Board of Overseers (BNQP Board of Overseers)
Advisory Committee on Earthquake Hazards Reduction (ACEHR)

As per you need NIST here I am giving information regarding to Guidelines on firewalls and firewall policy in PDF file;

Attached Files Available for Download

NIST Guidelines on firewalls and firewall policy.pdf (325.6 KB, 26 views)

Hello Friend myself Nitin from Assam, brother provide me the information of guidelines on firewalls and firewall policy by NIST, provide me in detail please????

Hello Nitin, on your demand I am providing you the information of guidelines on firewalls and firewall policy by NIST in detail, so here it is………….


Firewalls protect sites from exploitation of inherent vulnerabilities in the TCP/IP protocol suite. Additionally, they help mitigate security problems associated with insecure systems and the problems inherent in providing robust system security for large numbers of computers.

There are several types of firewalls, ranging from boundary routers that can provide access control on Internet Protocol packets, to more powerful firewalls that can close more vulnerabilities in the TCP/IP protocol suite, to even more powerful firewalls that can filter on the content of the traffic.


The type of firewall to use depends on several factors, including the size of the site, the amount of traffic, the sensitivity of systems and data, and the applications required by the organization. The choice of firewall should largely be driven by its feature set, rather than the type of firewall, however.
A standard firewall configuration involves using a router with access control capability at the boundary of the organization's network, and then using a more powerful firewall located behind the router.


Firewalls are vulnerable themselves to misconfigurations and failures to apply needed patches or other security enhancements. Accordingly, firewall configuration and administration must be performed carefully and organizations should also stay current on new vulnerabilities and incidents.

While a firewall is an organization's first line of defense, organizations should practice a defense in depth strategy, in which layers of firewalls and other security systems are used throughout the network.
Most importantly, organizations should strive to maintain all systems in a secure manner and not depend solely on the firewall to stop security threats. Organizations need backup plans in case the firewall fails.

Firewalls Now More Than Ever:
All organizations connected to the Internet should use a firewall. Internet-borne attacks, ranging from direct intruder attacks to indirect attacks in the form of malicious active content in email or from web sites, are sufficiently prevalent that operating without firewall protection would be very dangerous

__________________
Answered By StudyChaCha Member