B2B Integration : A Practical Guide to Collaborative E-commerce

Firewall
Function
Monitor,
Report
Writer
OSKernel TCP/IP
Private
Network
Web Browsers
'Router
aproxy http web gate
i
Internet Security 307
Mail Server
Figure 10.15. — Enigma firewall solution
Web Servers
DMZ
aka
Server Network
an enterprise security policy, is extremely rapid, as most of its components
are pre-installed and pre-configured. These appliances are built
using the latest security technologies; and provide remote administration,
the ability to manage multiple firewalls from one location, centralized
built-in reporting and logging for monitoring all activities and the
flexibility and scalability to support enterprise level traffic.
Check Point's Firewall-1, Symantec's VelociRaptor, Watchguard's
Firebox II and Enigma 2.0 Firewall Appliance are some examples of
enterprise firewall appliances.
Figure 10.15 is a simplified reconstruction of the internal workings
of the Enigma Firewall Appliance. All computers in the private network
and the DMZ communicate with the proxies. The proxies manage
connectivity between the networks and all transfers must pass through
them. There are multiple independent proxies that are tailored to provide
application specific defenses, such as e-mail, FTP, HTTP and reverse-
HTTP.