Our Principals

	Cisco Systems
	Checkpoint FW-1

Function
A firewall as a system of devices & applications used to portect one network from another untrusted network, such as the internet. Usually it is implemented using a three - layer design. On the outside there is a filtering router that implements access lists, to permit access to hosts only in the isolation LAN. These hosts are usually referred to as bastion hosts, An inside filtering router permits, access from the internal network to the isolation LAN. These should be no devices communicating directly from inside network to the outside router.

Features & Benefits

	Less complex & more Robust than packed filters.
	No required downtime for installation. No necessary day to day management.
	No required upgrading of hots or routers.
	PIX firewall uses a protection scheme called Network Address Translation (NAT), which allows internal users access to the internet while protecting internal networks from unauthorized access.
	PIX firewall supports data encryption with the Cisco PIX private Link, a card that provider secure communication between multiple PIX systems over the internet using the data encryption standard (DES).
	PIX firewall provides TCP & UDP connectivity from internal networks to the outside world by using adaptive security.
	PIX firewall provoided firewall security without the administrative overheads & risks associated with UNIX based or router based firewall systems.
	PIX firewall operates on a secure real-time kernel, not on UNIX. The network administrator is provided with complete auditing of all transactions, including attempted breakings.