Question

Discuss the main differences (minimum 3) between the firewall and IDS?

Use the diagram to illustrate the components for the types of IDS vs firewall. Use two or three sentences to discuss the differences based on your understanding?(no more than 300 words

Answer 1

Firewall:

1. Sits between internet and local network and prevent harmful traffic on basis of headers.

2. It is a software or a tool analyse protocol type, source address, destination address, source port, and/or destination port etc

3. It can block incoming connection if harmful.

IDS ( Intrusion Detection System)

1. It sits between local network and firewall and analyse headers and payload both.

2. It can be a software, hardware or combination of both.

3. It can not block incoming traffic but give an alert, log if case of any intruder activity found. ( IPS is used to prevent such.)

Diagram is showing that any attack from attacker first handled by firewall. Firewall restrict attack if harmful then from switch it passes to IDS which search packets for harmful data, and alert in case some harm found, in management you can prevent such attack.