NETWORK LAYER

What is HUB?
A hub is a multi-port repeater. A hub connects multiple wires coming from
different branches, for example, the connector in star topology which
connects different stations. Hubs cannot filter data, so data packets are
sent to all connected devices. In other words, the collision domain of all
hosts connected through hub remains one. Hub does not have any routing
table to store the data of ports and map destination addresses., the routing
table is used to send/broadcast information across all the ports.
How Does a Network Hub Work?
A hub is a multiport device, which has multiple ports in a device and shares
the data to multiple ports altogether. A hub acts as a dumb switch that
does not know, which data needs to be forwarded where so it broadcasts
or sends the data to each port.

Advantages of Network Hubs

• It is less expensive.
• It does not impact network performance.
• Hub support different network media.
Disadvantages of Network Hubs
• It cannot find the best/ shortest path of the network.
• No mechanism for traffic detection.
• No mechanism for data filtration.
• Not capable of connecting to different network topologies like
token ring, ethernet, etc.
What is a Router?
A Router is a networking device that forwards data packets between
computer networks. One or more packet-switched networks or
subnetworks can be connected using a router. By sending data packets to
their intended IP addresses, it manages traffic between different networks
and permits several devices to share an Internet connection.

Advantages of Routers
 1. They provide a connection between different network architectures such as
Ethernet & Token Ring, etc.
2. They can choose the best path across the internetwork using dynamic routing
algorithms.
3. They can reduce network traffic by creating collision domains and also by
creating broadcast domains.
4. They provide sophisticated routing, flow control, and traffic isolation.
5. They are configurable, which allows network managers to make policy-based
routing decisions.
6. Unlike hubs (which operate in half-duplex mode), routers handle full-duplex
communication, allowing data to be sent and received simultaneously without
collisions.

Disadvantages of Routers
1. They operate based on routable network protocols.
2. They are expensive compared to other network devices.
3. Dynamic router communications can cause additional network overhead,
resulting in less bandwidth for user data.
4. They are slower as they need to analyze data from layer-1 through layer-3.
5. They require a considerable amount of initial configuration.
6. They are protocol-dependent devices which must understand the protocol they
are forwarding.

Bridge
A bridge operates at the data link layer. A bridge is a repeater, with add
on the functionality of filtering content by reading the MAC addresses of
the source and destination. It is also used for interconnecting two LANs
working on the same protocol. It typically connects multiple network
segments and each port is connected to different segment. A bridge is not
strictly limited to two ports, it can have multiple ports to connect and
manage multiple network segments. Modern multi-port bridges are often
called Layer 2 switches because they perform similar functions.
Types of Bridges
• Transparent Bridges: These are the bridge in which the stations
are completely unaware of the bridge’s existence i.e. whether or
not a bridge is added or deleted from the network,
reconfiguration of the stations is unnecessary. These bridges
 make use of two processes i.e. bridge forwarding and bridge
learning.
• Source Routing Bridges: In these bridges, routing operations is
performed by the source station and the frame specifies which
route to follow. The host can discover the frame by sending a
special frame called the discovery frame, which spreads through
the entire network using all possible paths to the destination.
Switch
A switch is a multiport bridge with a buffer designed that can boost its
efficiency(a large number of ports imply less traffic) and performance. A
switch is a data link layer device. The switch can perform error checking
before forwarding data, which makes it very efficient as it does not forward
packets that have errors and forward good packets selectively to the
correct port only. In other words, the switch divides the collision
domain of hosts, but the broadcast domain remains the same.

Repeaters
Repeaters are network devices operating at physical layer of the OSI
model that amplify or regenerate an incoming signal before retransmitting
it. They are incorporated in networks to expand its coverage area. They
are also known as signal boosters.

Advantages of Repeaters
• Repeaters are simple to install and can easily extend the length or
the coverage area of networks.
• They are cost effective.
• Repeaters dont require any processing overhead. The only time they
need to be investigated is in case of degradation of performance.
• They can connect signals using different types of cables.

Disadvantages of Repeaters
• Repeaters cannot connect dissimilar networks.
• They cannot differentiate between actual signal and noise.
• They cannot reduce network traffic or congestion.
• Most networks have limitations upon the number of repeaters that
can be deployed.
Difference Between Classful Addressing and
Classless Addressing
Classless
Parameter Classful Addressing Addressing

Classless addressing
In Classful addressing IP
came to replace the
addresses are allocated
Basics classful addressing and
according to the classes- A
to handle the issue of
to E.
allocation of IP Address.

The changes in the Network There is no such

Network ID and
ID and Host ID depend on restriction of class in
Host ID
the class. classless addressing.

It does not support the It supports the Variable

VLSM Variable Length Subnet Length Subnet Mask
Mask (VLSM). (VLSM).

Classful addressing requires

It requires less
more bandwidth. As a
bandwidth. Thus, fast
result, it becomes slower
Bandwidth and less expensive as
and more expensive as
compared to classful
compared to classless
addressing.
addressing.

It does not support It supports Classless

CIDR Classless Inter-Domain Inter-Domain Routing
Routing (CIDR). (CIDR).

Updates Regular or periodic updates Triggered Updates

Troubleshooting and
Troubleshooting It is not as easy
problem detection are easy
and Problem compared to classful
than classless addressing
detection addressing.
because of the division of
 Classless
Parameter Classful Addressing Addressing

network, host and subnet

parts in the address.

• Network
Division of • Host
• Host
Address • Subnet
• Subnet

Introduction to Subnet
A subnet is like a smaller group within a large network. It is a way to split
a large network into smaller networks so that devices present in one
network can transmit data more easily. For example, in a company,
different departments can each have their own subnet, keeping their data
traffic separate from others. Subnet makes the network faster and easier
to manage and also improves the security of the network.
Why Subnetting is Important?
Let’s consider a company that follows classful addressing, it has a Class
C network ([Link]/24) with 256 IP addresses. It has three
departments:
• Sales: 20 devices
• HR: 10 devices
• IT: 50 devices
Without subnetting, all departments share the same network, and
all 256 IP addresses are available to everyone, which leads to:
• IP Waste: Only 80 devices are needed (20 + 10 + 50), but all
256 addresses are allocated, wasting 176 addresses.
• Performance Issues: Since all departments are on the same
network, any data sent between devices floods the entire
network, slowing communication for everyone. For example,
heavy data transfer in IT can impact Sales and HR.
• Security Risks: Without subnets, anyone in Sales can access HR
or IT devices, exposing sensitive data like payroll systems.
What is a Logical Address?
The logical address is a virtual address created by the CPU of the computer
system. The logical address of a program is generated when the program is
running. A group of several logical address is referred to a logical address space.
The logical address is basically used as a reference to access the physical
memory locations.
In computer systems, a hardware device named memory management
unit (MMU) is used to map the logical address to its corresponding physical
address. However, the logical address of a program is visible to the computer
user.

What is a Physical Address?

The physical address of a computer program is one that represents a location in
the memory unit of the computer. The physical address is not visible to the
computer user. The MMU of the system generates the physical address for the
corresponding logical address.
The physical address is accessed through the corresponding logical address
because a user cannot directly access the physical address. For running a
computer program, it requires a physical memory space. Therefore, the logical
address has to be mapped with the physical address before the execution of
the program.

Difference between Logical and Physical Address in

Operating System
S.
Logical Address Physical Address
No.

This address is generated by This address is a location in the memory

1.
the CPU. unit.

This address is a set of all physical

The address space consists of
2. addresses that are mapped to the
the set of all logical addresses.
corresponding logical addresses.

These addresses are generated

It is computed using Memory
3. by CPU with reference to a
Management Unit (MMU).
specific program.
 The user has the ability to view
The user can't view the physical address
4. the logical address of a
of program directly.
program.

The user can use the logical

The user can indirectly access the
5. address in order to access the
physical address.
physical address.

Difference between IPv4 and IPv6

Key IPv4 Protocol IPv6 Protocol

IPv6 has a 128-bit address

IPv4 has an address length of
length represented in
Address 32-bit represented in decimal
hexadecimal format. It
Configuration format. It supports Manual
supports auto-configuration
and DHCP configuration.
and renumbering configuration.

In case of IPv6, the total

In case of IPv4, a total number of IP addresses that
number of 4.20 × could be generated is 3.4 ×
Address Space
109 addresses could get 1038 which is much greater
generated. than the number produced by
IPv4.

IPv4 is being used as less IPv6 has its inbuilt security

secure protocol, as its feature named as IPSEC
security section is dependent (Internet Protocol Security)
on the application, i.e., it is which provide additional
Secure
proportional to the security security feature along with the
that is provided or security provided or
implemented at the implemented at application
application level. level.

In case of IPv4, fragmentation

In case of IPv6, fragmentation
is performed by both the
Fragmentation is performed only by the
Sender and the Forwarding
sender routers.
routers.

IPv4 does not provide

IPv6 provides both Encryption
Authentication Encryption and Authentication
and Authentication facilities.
facilities.

In IPv4, the Request header is In IPv6, the Request header is

Header Size
not fixed and it may be of fixed size, i.e., 40 bytes.
 Key IPv4 Protocol IPv6 Protocol

between of 20-60 bytes in

size.

Differences between TCP and UDP

Key TCP UDP

It is a communications protocol, using It is same as the TCP protocol

which the data is transmitted between except this doesnt guarantee the
systems over the network. In this, the error-checking and data
Definition data is transmitted in the form of recovery. If you use this
packets. It includes error-checking, protocol, the data will be sent
guarantees the delivery and preserves continuously, irrespective of the
the order of the data packets. issues in the receiving end.

Design TCP is a connection-oriented protocol. UDP is a connectionless protocol.

UDP, on the other hand,

provides only basic error
TCP is more reliable as it provides
checking support using
error checking support and also
Reliability checksum. So, the delivery of
guarantees delivery of data to the
data to the destination cannot be
destination router.
guaranteed in UDP as in case of
TCP.

There is no sequencing of data in

In TCP, the data is transmitted in a
Data UDP in order to implement
particular sequence which means that
transmission ordering it has to be managed by
packets arrive in-order at the receiver.
the application layer.

TCP is slower and less efficient in

performance as compared to UDP. Also UDP is faster and more efficient
Performance
TCP is heavy-weight as compared to than TCP.
UDP.

Retransmission of data packets is

Retransmission of packets is not
Retransmission possible in TCP in case packet get lost
possible in UDP.
or need to resend.
 The Transmission Control Protocol has
In UDP, there is no data
a function that allows data to be
sequencing. The application layer
Sequencing sequenced (TCP). This implies that
must control the order if it is
packets arrive at the recipient in the
necessary.
sequence they were sent.

TCP uses a variable-length (20-60) UDP has a fixed-length header of

Header size
bytes header. 8 bytes.

It's a connectionless protocol,

Handshakes such as SYN, ACK, and
Handshake which means it doesn't require a
SYNACK are used.
handshake.

Broadcasting is supported by
Broadcasting Broadcasting is not supported by TCP.
UDP.

HTTP, HTTPs, FTP, SMTP, and Telnet DNS, DHCP, TFTP, SNMP, RIP,
Examples
use TCP. and VoIP use UDP.

Differences between Intradomain and Interdomain Routing

[Link] Intradomain Routing Interdomain Routing

Routing algorithm works only Routing algorithm works within

1. within domains. and between domains.

It need to know only about other

It need to know only about other routers within and between their
2. routers within their domain. domain.

Protocols used in intradomain Protocols used in interdomain

routing are known as Interior- routing are known as Exterior-
3. gateway protocols. gateway protocols.

In this Routing, routing takes In this Routing, routing takes

place within an autonomous place between the autonomous
4. network. networks.

Interdomain routing protocol

Intradomain routing protocols assumes that the internet contains
ignores the internet outside the the collection of interconnected
5. AS(autonomous system). AS(autonomous systems).

Some Popular Protocols of this Popular Protocols of this routing

routing are RIP(routing is BGP(Border Gateway Protocol)
information protocol) and used to connect two or more
6. OSPF(open shortest path first). AS(autonomous system).
What is Static Routing?
Static Routing is also known as non-adaptive routing which doesn’t
change the routing table unless the network administrator changes or
modifies them manually. Static routing does not use complex routing
algorithms and It provides higher or more security than dynamic routing.
Advantages of Static Routing
• No routing overhead for the routerCPU which means a cheaper
router can be used to do routing.
• It adds security because only an only administrator can allow
routing to particular networks only.
• No bandwidth usage between routers.
Disadvantage of Static Routing
• For a large network, it is a hectic task for administrators to
manually add each route for the network in therouting table on
each router.
• The administrator should have good knowledge of the topology.
If a new administrator comes, then he has to manually add each
route so he should have very good knowledge of the routes of
the topology.
What is Dynamic Routing?
Dynamic routing is also known as adaptive routing which changes the
routing table according to the change in topology. Dynamic routing uses
complex routing algorithms and it does not provide high security like static
routing. When the network change(topology) occurs, it sends the message
to the router to ensure that changes then the routes are recalculated for
sending updated routing information.
Advantages of Dynamic Routing
• Easy to configure.
• More effective at selecting the best route to a destination
remote network and also for discovering remote networks.
Disadvantage of Dynamic Routing
• Consumes morebandwidth for communicating with other
neighbors.
• Less secure than static routing.
Difference between Static and Dynamic Routing
Static routing and dynamic routing are two fundamental concepts in
network communication. Static routing uses preconfigured paths, while
dynamic routing automatically adjusts paths based on current network
conditions.
Static Routing Dynamic Routing

In static routing routes are user- In dynamic routing, routes are

defined. updated according to the topology.

Static routing does not use Dynamic routing uses complex routing
complex routing algorithms. algorithms.

Static routing provides high or Dynamic routing provides less

more security. security.

Static routing is manual. Dynamic routing is automated.

Static routing is implemented in Dynamic routing is implemented in

small networks. large networks.

In static routing, additional In dynamic routing, additional

resources are not required. resources are required.

In static routing, failure of the link In dynamic routing, failure of the link
disrupts the rerouting. does not interrupt the rerouting.

Less Bandwidth is required in More Bandwidth is required in

Static Routing. Dynamic Routing.

Static Routing is difficult to

Dynamic Routing is easy to configure.
configure.

Another name for static routing is Another name for dynamic routing is
non-adaptive routing. adaptive routing
Border Gateway Protocol (BGP)
The protocol can connect any internetwork of the autonomous system
using an arbitrary topology. The only requirement is that each AS have at
least one router that can run BGP and that is the router connected to at
least one other AS’s BGP router. BGP’s main function is to exchange
network reachability information with other BGP systems. Border
Gateway Protocol constructs an autonomous systems graph based on the
information exchanged between BGP routers.
Characteristics of Border Gateway Protocol (BGP)
• Inter-Autonomous System Configuration: The main role of
BGP is to provide communication between two autonomous
systems.
• BGP supports the Next-Hop Paradigm.
• Coordination among multiple BGP speakers within the AS
(Autonomous System).
• Path Information: BGP advertisements also include path
information, along with the reachable destination and next
destination pair.
• Policy Support: BGP can implement policies that can be
configured by the administrator. For ex:- a router running BGP
can be configured to distinguish between the routes that are
known within the AS and that which are known from outside the
AS.
• Runs Over TCP.
• BGP conserves network Bandwidth.
• BGP supports CIDR.
• BGP also supports Security.
Functionality of Border Gateway Protocol (BGP)
BGP peers perform 3 functions, which are given below.
• The first function consists of initial peer acquisition and
authentication. both the peers established a TCP connection and
performed message exchange that guarantees both sides have
agreed to communicate.
• The second function mainly focuses on sending negative or
positive reach-ability information.
• The third function verifies that the peers and the network
connection between them are functioning correctly.
Importance of Border Gateway Protocol(BGP)
• Security: BGP is highly secure because it authenticates
messages between routers using preconfigured passwords
through which unauthorized traffic is filtered out.
• Scalability: BGP is more scalable because it manages a vast
number of routes and networks present on the internet.
• Supports Multihoming: BGP allows multihoming means an
organization can connect to multiple networks simultaneously.
• Calculate the Best Path: As we know data packets is traveled
across the internet from source to destination every system in
between the source and destination has to decide where the
data packet should go next
• TCP/IP Model: BGP is based on the TCP/IP model and it is used
to control the network layer by using transport layer protocol.
• Difference Between RIP and OSPF
RIP OSPF

RIP Stands for Routing Information OSPF stands for Open Shortest Path
Protocol. First.

RIP works on the Bellman-Ford

OSPF works on Dijkstra algorithm.
algorithm.

It is a Distance Vector protocol and It is a link-state protocol and it

it uses the distance or hops count analyzes different sources like the
to determine the transmission speed, cost and path congestion while
path. identifying the shortest path.

It is used for smaller size It is used for larger size organizations

organizations. in the network.

There is no such restriction on the hop

It allows a maximum of 15 hops.
count.

It is not a more intelligent dynamic It is a more intelligent routing protocol

routing protocol. than RIP.
 RIP OSPF

The networks are classified as areas,

The networks are classified as
sub-areas, autonomous systems, and
areas and tables here.
backbone areas here.

Its administrative distance is 120. Its administrative distance is 110.

RIP uses UDP(User Datagram OSPF works for IP(Internet

Protocol) Protocol. Protocol) Protocol.

It calculates the metric in terms of It calculates the metric in terms of

Hop Count. bandwidth.

In RIP, the whole routing table is to In OSPF, parts of the routing table are
be broadcasted to the neighbors only sent when a change has been
every 30 seconds by the routers. made to it.

RIP utilizes less memory compared

OSPF device resource requirements
to OSPF but is CPU intensive like
are CPU intensive and memory.
OSPF.

It consumes more bandwidth

because of greater network It consumes less bandwidth as only
resource requirements in sending part of the routing table is to send.
the whole routing table.

OSPF’s multicast addresses are

Its multicast address is [Link].
[Link] and [Link].
Distance Vector Routing Vs Link State Routing

Comparison between Distance Vector Routing and

Link State Routing
 Distance Vector Routing Link State Routing

Bandwidth required is less due to Bandwidth required is more due to

local sharing, small packets and no flooding and sending of large link
flooding. state packets.

Based on local knowledge, since it

Based on global knowledge, it have
updates table based on information
knowledge about entire network.
from neighbours.

Make use of Bellman Ford Algorithm. Make use of Dijakstra’s algorithm.

Traffic is less. Traffic is more.

Converges slowly i.e, good news

spread fast and bad news spread Converges faster.
slowly.

Count of infinity problem. No count of infinity problem.

Persistent looping problem i.e, loop No persistent loops, only transient

will be there forever. loops.

Practical implementation Practical implementation

is RIP and IGRP. is OSPF and ISIS.

Differences Between Token Bucket and Leaky Bucket

Algorithm
Allows for burst traffic Smooths traffic by
Traffic Handling by saving tokens enforcing a constant rate

Token/Bucket Uses tokens to control Uses a leaky bucket to

Concept data transmission control data transmission

Data waits until enough Excess data is discarded

Data Dropping tokens are available if the bucket overflows
 More flexible with More rigid, enforces a
Rate Flexibility bursts steady rate

Suitable for bursty Suitable for steady rate

Use Case traffic and rate limiting enforcement and shaping

Implementation
Generally more complex Generally simpler
Complexity

Data can be buffered

Limited buffering, excess
until tokens are
data is dropped
Buffering available

What is Quality of Service?

Quality-of-service (QoS) refers to traffic control mechanisms that seek to
differentiate performance based on application or network-operator
requirements or provide predictable or guaranteed performance to
applications, sessions, or traffic aggregates. The basic phenomenon for
QoS is in terms of packet delay and losses of various kinds.
QoS Specification
• Delay
• Delay Variation(Jitter)
• Throughput
• Error Rate
Types of Quality of Service
• Stateless Solutions – Routers maintain no fine-grained state
about traffic, one positive factor of it is that it is scalable and
robust. But it has weak services as there is no guarantee about
the kind of delay or performance in a particular application
which we have to encounter.
• Stateful Solutions – Routers maintain a per-flow state as flow
is very important in providing the Quality-of-Service i.e.
providing powerful services such as guaranteed services and
high resource utilization, providing protection, and is much less
scalable and robust.
 APLICATION LAYER

Cryptography
Cryptography is a technique of securing information and communications
using codes to ensure confidentiality, integrity and authentication. Thus,
preventing unauthorized access to information. The prefix “crypt” means
“hidden” and the suffix “graphy” means “writing”. In Cryptography, the
techniques that are used to protect information are obtained from
mathematical concepts and a set of rule-based calculations known as
algorithms to convert messages in ways that make it hard to decode
them. These algorithms are used for cryptographic key generation, digital
signing, and verification to protect data privacy, web browsing on the
internet and to protect confidential transactions such as credit card and
debit card transactions.

Features Of Cryptography
The features of cryptography that makes it a popular choice in various
applications could be listed down as:
1. Confidentiality: Information can only be accessed by the person
for whom it is intended and no other person except him can
access it.
2. Integrity: Information cannot be modified in storage or transition
between sender and intended receiver without any addition to
information being detected.
3. Non-repudiation: The creator/sender of information cannot deny
his intention to send information at a later stage.
4. Authentication: The identities of the sender and receiver are
confirmed. As well destination/origin of the information is
confirmed.
5. Interoperability: Cryptography allows for secure communication
between different systems and platforms.
6. Adaptability: Cryptography continuously evolves to stay ahead
of security threats and technological advancements.
Symmetric Key Cryptography
Symmetric Key Cryptography is an encryption system where the sender
and receiver of a message use a single common key to encrypt and
decrypt messages. Symmetric Key cryptography is faster and simpler but
the problem is that the sender and receiver have to somehow exchange
keys securely. The most popular symmetric key cryptography systems
are Data Encryption Systems (DES) and Advanced Encryption Systems
(AES) .
Asymmetric Key Cryptography
In Asymmetric Key Cryptography , a pair of keys is used to encrypt and
decrypt information. A sender’s public key is used for encryption and a
receiver’s private key is used for decryption. Public keys and Private keys
are different. Even if the public key is known by everyone the intended
receiver can only decode it because he holds his private key. The most
popular asymmetric key cryptography algorithm is the RSA algorithm.

Difference Between RSA algorithm and DSA

RSA DSA

It is a cryptosystem algorithm. It is digital signature algorithm.

It is used for encryption, digital

It is used for digital signature and its
signature and secure data
verification only.
transmission.

It uses public key for encryption and Whereas, it uses public key for
private key for decryption and verification and private key for
signing. signing.

It was developed by National

It was developed by Ron Rivest, Adi
Institute of Standards and
Shamir and Leonard Adleman.
Technology (NIST).

It uses mathematical concept of

It uses modular exponentiation and
factorization of product of two large
discrete logarithm.
primes.
RSA DSA

While it is faster in key generation as

It is slower in key generation.
compared to RSA.

It is faster than DSA in encryption. While it is slower in encryption.

It is slower in decryption. While it is faster in decryption.

It is best suited for verification and It is best suited for signing in and
encryption. decryption.

Difference Between RSA algorithm and DSA

RSA DSA

It is a cryptosystem algorithm. It is digital signature algorithm.

It is used for encryption, digital

It is used for digital signature and its
signature and secure data
verification only.
transmission.

It uses public key for encryption and Whereas, it uses public key for
private key for decryption and verification and private key for
signing. signing.

It was developed by National

It was developed by Ron Rivest, Adi
Institute of Standards and
Shamir and Leonard Adleman.
Technology (NIST).

It uses mathematical concept of

It uses modular exponentiation and
factorization of product of two large
discrete logarithm.
primes.

While it is faster in key generation as

It is slower in key generation.
compared to RSA.
RSA DSA

It is faster than DSA in encryption. While it is slower in encryption.

It is slower in decryption. While it is faster in decryption.

It is best suited for verification and It is best suited for signing in and
encryption. decryption.

Hash Functions
Hash functions are a fundamental concept in computer science and play
a crucial role in various applications such as data storage, retrieval, and
cryptography. A hash function creates a mapping from an input key to an
index in hash table.

Key Properties of Hash Functions

• Deterministic: A hash function must consistently produce the
same output for the same input.
• Fixed Output Size: The output of a hash function should have a
fixed size, regardless of the size of the input.
• Efficiency: The hash function should be able to process input
quickly.
• Uniformity: The hash function should distribute the hash values
uniformly across the output space to avoid clustering.
• Pre-image Resistance: It should be computationally infeasible
to reverse the hash function, i.e., to find the original input given a
hash value.
• Collision Resistance: It should be difficult to find two different
inputs that produce the same hash value.
• Avalanche Effect: A small change in the input should produce a
significantly different hash value.
Applications of Hash Functions
• Hash Tables: The most common use of hash functions in DSA is
in hash tables, which provide an efficient way to store and
retrieve data.
• Data Integrity: Hash functions are used to ensure the integrity
of data by generating checksums.
 • Cryptography: In cryptographic applications, hash functions are
used to create secure hash algorithms like SHA-256.

Network Firewalls

Network Firewalls are the devices that are used to prevent private
networks from unauthorized access. A Firewall is a security solution for
the computers or devices that are connected to a network, they can be
either in the form of hardware as well as in form of software. It monitors
and controls the incoming and outgoing traffic (the amount of data moving
across a computer network at any given time ).
The major purpose of the network firewall is to protect an inner network
by separating it from the outer network. An inner Network can be simply
called a network created inside an organization and a network that is not
in the range of an inner network can be considered an Outer Network.
Types of Network Firewalls