1-

You learned in this chapter that firewalls help to provide a layer of defense to a network to keep malicious actors at bay, as much as possible.  Firewalls have the ability to detect and block questionable or known IP addresses that have already been identified as malcious.    There are three ways a firewall can defend a network:  packet inspecition, stateful packet inspection and application based.

In your opinion, provide a 100 word minimum summary of your thoughts on which is better or if you were in charge of a network, what type or how many layers of firewalls would you have to protect your gateway to the Internet?  Would you use multiple firewalls from the same vendor ?  Do firewalls alone provide enought protection?   What would you add to your configuration file to provide an additional layer of protection?

2-

in this chapter we learned about the various ways to secure a network.  Write a 300 word minimum summary, in YOUR OPINION, and include your thoughts on the following points.   Make sure to include all the required items listed in your submission.   There is no preference either way how you cite your sources, however they need to be included in your paper or you will be docked points.   Also, do not do a copy and paste of what you have learned, I am looking for your words and not from the website you used to learn about the laws or you will be docked points.

1. What is the difference bewtween a false positive and a false negative in a detection system?
2. Within a vulnerability or penetration assessment, how do you know if an item listed within the result findings is a false positive or false negative?
3. In your opinion, which is more accurate?  Having an IDS/IPS that is based on signatures or based on anomaly detection? Why or why not for each.
4. If you were responsible for purchasing a firewall, would you purchase a host or network based firewall?.  Why or why not for each.