Question

Your organization has created a data-sharing partnership with another business. Management of both organizations has decided they want to share data between their networks via FTP. Data sharing will occur between known, existing servers on each side of the network. You have been asked to devise a firewall-specific strategy to facilitate this new connection. What strategy would you recommend, and why? Your answer should be approximately 200-250 words in length

Please use your own words. Do not copy and paste or use an answer already posted on Chegg

Answer 1

Firewall strategy to be used in this case would be Firewall positioned on both sides of DMZ. This is because FTP is being used and so this will help in offering protection specific to the infrastructure of the business.

• FTP modes offer many challenges to the security of the network. This can be true for both client-side firewall admin as well as server-side admin.
• The common use of FTP is for file transmission and setting up open connection from server to client. This doesn't work with firewalls based on filters. In other cases, the data channel can represent outgoing calls with the firewall.

When firewalls are used with DMZ, one of the firewalls will act as a screening firewall. This is usually the outer firewall using which data will be transferred between two networks.

• The inner firewall will be used to secure the internal network.
• In this case when FTP server is put in this zone it will prevent any traffic that is unauthorized.
• It will only let the data transfer for business purposes.
• With such infrastructure, data can securely move between businesses. There will be use of ids/passwords credentials.

In future, the configuration can be extended to a virtual private network of firewall to firewall type.