High Availability firewally
Loading...
Date
Authors
Frátrik, Tibor
ORCID
Advisor
Referee
Mark
B
Journal Title
Journal ISSN
Volume Title
Publisher
Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií
Abstract
Táto diplomová práca je venovaná výskumu možnosťam redundancie firewallov a to špeciálne komerčným, softvérovým alebo hardvérovým. V teoretickej časti sú popísane jednotlivé firewally a ich možnosti redundancie. Diplomová práca bola viac zameraná na dva konkrétne firewally: ASA a Pfsense. V rámci praktickej časti boli navrhnuté a implementované topógie pre otestovanie redundancie u týchto firewallov. Pre testovanie boli vybrané dynamické preklady adries (NAT), stav VPN spojení, či už VPN spojenie typu site-to-site alebo remote-access a tiež spojenia TCP. Na záver boli porovnané výsledky pre jednotlivé firewally. Kde bolo skúmané a porovnané prevažne to, ako počítačová sieť u jednotlivých typov firewallov reaguje na redundanciu.
This diploma thesis is dedicated to researching the possibility redundancy of firewalls, especially commercial, software or hardware firewalls. The theoretical part describes individual firewalls and their redundancy options. The diploma thesis was more focused on two specific firewalls: ASA and Pfsense. As part of the practical part, topologies were designed and implemented for testing the redundancy of these firewalls. Dynamic address translations (NAT), VPN connection status, either site-to-site or remote-access VPN connections, and TCP connections were selected for testing. Finally, the results for individual firewalls were compared. Where it was mainly researched and compared, how the computer network reacts to redundancy in individual types of firewalls.
This diploma thesis is dedicated to researching the possibility redundancy of firewalls, especially commercial, software or hardware firewalls. The theoretical part describes individual firewalls and their redundancy options. The diploma thesis was more focused on two specific firewalls: ASA and Pfsense. As part of the practical part, topologies were designed and implemented for testing the redundancy of these firewalls. Dynamic address translations (NAT), VPN connection status, either site-to-site or remote-access VPN connections, and TCP connections were selected for testing. Finally, the results for individual firewalls were compared. Where it was mainly researched and compared, how the computer network reacts to redundancy in individual types of firewalls.
Description
Citation
FRÁTRIK, T. High Availability firewally [online]. Brno: Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií. 2023.
Document type
Document version
Date of access to the full text
Language of document
cs
Study field
bez specializace
Comittee
doc. Ing. Václav Zeman, Ph.D. (předseda)
doc. Ing. Petr Münster, Ph.D. (člen)
Ing. Rudolf Vohnout, Ph.D. (člen)
Ing. Jan Dvořák, Ph.D. (člen)
doc. JUDr. Matěj Myška, Ph.D. (člen)
doc. Mgr. Karel Slavíček, Ph.D. (místopředseda)
Date of acceptance
2023-06-07
Defence
Student prezentoval výsledky své práce a komise byla seznámena s posudky. Student obhájil diplomovou práci a odpověděl na otázky členů komise a oponenta.
Result of defence
práce byla úspěšně obhájena
Document licence
Standardní licenční smlouva - přístup k plnému textu bez omezení