åå¿è åãã«ãã¡ã€ã¢ãŠã©ãŒã«ã®åºæ¬ããããããã解説ããŸãã
ð€ ãã¡ã€ã¢ãŠã©ãŒã«ã£ãŠäœïŒ
ãã¡ã€ã¢ãŠã©ãŒã«ïŒFirewallïŒã¯ãè±èªã§ãé²ç«å£ããšããæå³ã§ããã€ã³ã¿ãŒãããã®äžçã§ã¯ãããªãã®ã³ã³ãã¥ãŒã¿ãŒãäŒç€Ÿã®ãããã¯ãŒã¯ããã€ã³ã¿ãŒãããçµç±ã®äžæ£ãªã¢ã¯ã»ã¹ããµã€ããŒæ»æããå®ããéçªãããèŠåå¡ãã®ãããªåœ¹å²ãæãããŸãã
ã€ã³ã¿ãŒãããã«æ¥ç¶ããŠãããšã䟿å©ãªåé¢ãæªæã®ãã第äžè ããæ»æãåããå¯èœæ§ããããŸãããã¡ã€ã¢ãŠã©ãŒã«ã¯ãäºåã«æ±ºããããã«ãŒã«ã«åºã¥ããŠãæªããéä¿¡ããããã¯ããå®å šãªéä¿¡ã ããéããŠãããŸããããã«ãããããŒã¿ã®æ¹ãããæ å ±æŒãããé²ããã»ãã¥ãªãã£å¯Ÿçã®åºæ¬ãšãªãéèŠãªä»çµã¿ã§ãã
âïž ã©ããã£ãŠå®ã£ãŠãããã®ïŒãã¡ã€ã¢ãŠã©ãŒã«ã®ä»çµã¿
ãã¡ã€ã¢ãŠã©ãŒã«ã¯ããããã¯ãŒã¯ãè¡ã亀ãããŒã¿ïŒãã±ãããšåŒã°ããŸãïŒãåžžã«ç£èŠããŠããŸãããããŠããã®ããŒã¿ããã©ãããæ¥ãŠããã©ããžè¡ãã®ãããã©ã®çš®é¡ã®éä¿¡ãããšãã£ãæ å ±ïŒIPã¢ãã¬ã¹ãããŒãçªå·ãªã©ïŒãèŠãŠããããããèšå®ãããã«ãŒã«ïŒããªã·ãŒïŒãšç §ããåãããŸãã
ã«ãŒã«ã«åèŽããå®å šãªéä¿¡ã¯ãèš±å¯ â ããããã«ãŒã«ã«åããæªããéä¿¡ãäžæ£ãªã¢ã¯ã»ã¹ãšå€æããããã®ã¯ãæåŠ âããããŸãããã®äžé£ã®å€æããã»ã¹ããã£ã«ã¿ãªã³ã°ãšåŒã³ãŸãã
äŸãããªãããã³ã·ã§ã³ã®å ¥ãå£ã«ããèŠåå¡ããããäœæ°ãäºåã«èš±å¯ããã蚪åè ã ããéããæªãã人ãèš±å¯ã®ãªã人ã®ç«ã¡å ¥ããæåŠãããããªã€ã¡ãŒãžã§ããð®ââïž
𧱠ãã¡ã€ã¢ãŠã©ãŒã«ã®çš®é¡
ãã¡ã€ã¢ãŠã©ãŒã«ã«ã¯ãéä¿¡ããã§ãã¯ããæ¹æ³ã«ãã£ãŠããã€ãã®çš®é¡ããããŸããããã§ã¯ä»£è¡šçãªãã®ã玹ä»ããŸãã
çš®é¡ | ç¹åŸŽ | ã¡ãªãã | ãã¡ãªãã |
---|---|---|---|
ãã±ãããã£ã«ã¿ãªã³ã°å | éä¿¡ããŒã¿ïŒãã±ããïŒã®ããããŒæ å ±ïŒéä¿¡å /å®å IPã¢ãã¬ã¹ãããŒãçªå·ãªã©ïŒãèŠãŠãã«ãŒã«ã«åºã¥ããŠéä¿¡ãèš±å¯ãããå€æããæãåºæ¬çãªã¿ã€ããPCã«æšæºæèŒãããŠãããã®ãå€ãã§ãã | åŠçãéãðš | ããŒã¿ã®äžèº«ãŸã§ã¯èŠãªããããå·§åŠã«åœè£ ãããæ»æã«ã¯åŒ±ãå ŽåããããŸãã |
ãµãŒãããã¬ãã«ã²ãŒããŠã§ã€å | TCP/IPã®ã»ãã·ã§ã³ïŒéä¿¡ã®å§ãŸãããçµãããŸã§ïŒãç£èŠããæ£åœãªéä¿¡çµè·¯ã確ç«ãããŠãããã確èªããŸããããŒãå¶åŸ¡æ©èœãæã¡ãŸãã | ãã±ãããã£ã«ã¿ãªã³ã°åããã¯å®å šæ§ãé«ãã§ããç¹å®ã®ã¢ããªã±ãŒã·ã§ã³éä¿¡å¶åŸ¡ãå¯èœã§ãã | ããŒã¿ã®äžèº«ã¯ãã§ãã¯ããŸããã |
ã¢ããªã±ãŒã·ã§ã³ã²ãŒããŠã§ã€å (ãããã·å) | ç¹å®ã®ã¢ããªã±ãŒã·ã§ã³ïŒWebãã©ãŠã¶ã®HTTPéä¿¡ãªã©ïŒã®ä»£çïŒãããã·ïŒãšããŠéä¿¡ãäžç¶ããããŒã¿ã®äžèº«ãŸã§è©³çŽ°ã«ãã§ãã¯ããŸãã | éåžžã«é«ãã»ãã¥ãªãã£ãæäŸããŸããåœè£ ã«åŒ·ãðª | åŠçãè€éã«ãªããããéä¿¡é床ãé ããªãããšããããŸãã |
ã¹ããŒããã«ã€ã³ã¹ãã¯ã·ã§ã³å | ãã±ãããã£ã«ã¿ãªã³ã°ã®æ©èœã«å ããéå»ã®éä¿¡ã®ç¶æ³ïŒã¹ããŒãïŒãèšæ¶ãããã®æèã«åºã¥ããŠéä¿¡ã®å¯åŠãå€æããŸããããè³¢ããã±ãããã£ã«ã¿ãªã³ã°ã§ãã | ãã±ãããã£ã«ã¿ãªã³ã°åããå®å šã§ãã¢ããªã±ãŒã·ã§ã³ã²ãŒããŠã§ã€åããé«éãªå Žåãå€ãã§ãã | ã¢ããªã±ãŒã·ã§ã³ã®è匱æ§ãçªãæ»æã«ã¯éçããããŸãã |
次äžä»£ãã¡ã€ã¢ãŠã©ãŒã« (NGFW) | åŸæ¥ã®ãã¡ã€ã¢ãŠã©ãŒã«æ©èœã«å ããäžæ£äŸµå ¥é²åŸ¡(IPS)ãã¢ããªã±ãŒã·ã§ã³ã®èå¥ã»å¶åŸ¡ããã«ãŠã§ã¢å¯Ÿçãªã©ãããå€ãã®ã»ãã¥ãªãã£æ©èœãçµ±åããé«æ©èœãªãã¡ã€ã¢ãŠã©ãŒã«ã§ãã | 1å°ã§å€å±€çãªé²åŸ¡ãå¯èœã§ããè åšãžã®å¯Ÿå¿åãé«ãâš | é«æ©èœãªåãèšå®ãè€éã«ãªã£ãããã³ã¹ããé«ããªãããšããããŸãã |
æè¿ã§ã¯ããããã®æ©èœãçµã¿åãããããããé«åºŠãªæ©èœãæã€ãã¡ã€ã¢ãŠã©ãŒã«ïŒæ¬¡äžä»£ãã¡ã€ã¢ãŠã©ãŒã«ãªã©ïŒãç»å ŽããŠããŸãã
ð¡ ãªããã¡ã€ã¢ãŠã©ãŒã«ã¯å¿ èŠãªã®ïŒ
ãã¡ã€ã¢ãŠã©ãŒã«ã¯ãã€ã³ã¿ãŒããããå©çšããäžã§éåžžã«éèŠã§ããäž»ãªçç±ã¯ä»¥äžã®éãã§ãã
- äžæ£ã¢ã¯ã»ã¹ã®é²æ¢: æªæã®ããããã«ãŒãªã©ããããªãã®ã³ã³ãã¥ãŒã¿ãŒããããã¯ãŒã¯ã«åæã«äŸµå ¥ããããšããã®ãé²ããŸãã
- ãã«ãŠã§ã¢ææã®ãªã¹ã¯äœæž: ãŠã€ã«ã¹ãã¯ãŒã ãšãã£ãæªè³ªãªãœãããŠã§ã¢ãããããã¯ãŒã¯ãéããŠäŸµå ¥ããŠããã®ãé²ãå©ãã«ãªããŸãã
- æ å ±æŒããã®é²æ¢: å€éšããã®æ»æã«ãã£ãŠãå人æ å ±ãæ©å¯æ å ±ãçã¿åºããããªã¹ã¯ãæžãããŸããç¹ã«æšçåæ»æãªã©ãç¹å®ã®çµç¹ãçã£ãæ»æããã®é²åŸ¡ã«ã圹ç«ã¡ãŸãã
- ãããã¯ãŒã¯ã®å®å®æ§ç¶æ: äžèŠãªéä¿¡ãæ»æã«ããéä¿¡ãé®æããããšã§ããããã¯ãŒã¯å šäœã®å®å®æ§ãä¿ã¡ãŸãã
ãã¡ã€ã¢ãŠã©ãŒã«ããªãç¶æ ã¯ã家ã«éµããããã«å€åºãããããªãã®ã§ãðªðãå°å ¥ããããšã§ãã€ã³ã¿ãŒãããäžã®æ§ã ãªè åšã«å¯Ÿããæåã®é²åŸ¡ç·ãç¯ãããšãã§ããŸãã
â ïž ãã¡ã€ã¢ãŠã©ãŒã«ã®éç
ãã¡ã€ã¢ãŠã©ãŒã«ã¯éåžžã«éèŠã§ãããäžèœã§ã¯ãããŸããã泚æãã¹ãç¹ããããŸãã
- å šãŠã®è åšãé²ããããã§ã¯ãªã: ãã¡ã€ã¢ãŠã©ãŒã«ã¯äž»ã«ãããã¯ãŒã¯ã¬ãã«ã§ã®é²åŸ¡ãè¡ããŸããèš±å¯ãããéä¿¡ããŒããéãæ»æïŒäŸ: ã¡ãŒã«ã«æ·»ä»ããããŠã€ã«ã¹ãWebãµã€ãçµç±ã®æ»æã®äžéšïŒããUSBã¡ã¢ãªçµç±ã®ãŠã€ã«ã¹ææãªã©ã¯é²ããªãå ŽåããããŸãã
- èšå®ãã¹ã«ããè匱æ§: ã«ãŒã«èšå®ãäžé©åã ãšãæ¬æ¥ãããã¯ãã¹ãéä¿¡ãéããŠããŸã£ãããå¿ èŠãªéä¿¡ããããã¯ããŠããŸãå¯èœæ§ããããŸãã
- å éšããã®è åš: 瀟å ãããã¯ãŒã¯å éšããã®äžæ£è¡çºããå éšã®ã³ã³ãã¥ãŒã¿ãŒããŠã€ã«ã¹ã«ææããå Žåã®è¢«å®³æ¡å€§ãé²ãã®ã¯é£ããå ŽåããããŸãã
â ãŸãšã
ãã¡ã€ã¢ãŠã©ãŒã«ã¯ãã€ã³ã¿ãŒãããã®è åšããç§ãã¡ãå®ãããã®åºæ¬çãªã»ãã¥ãªãã£å¯Ÿçã§ãð¡ïžãå€éšããã®äžæ£ã¢ã¯ã»ã¹ãé²ããéçªããšããŠæ©èœããå®å šãªã€ã³ã¿ãŒãããå©çšã«æ¬ ãããŸããã
å€ãã®ããœã³ã³ãã«ãŒã¿ãŒã«ã¯æšæºã§ãã¡ã€ã¢ãŠã©ãŒã«æ©èœãåãã£ãŠããŸããèšå®ãæå¹ã«ãªã£ãŠããã確èªããä»ã®ã»ãã¥ãªãã£å¯ŸçãšåãããŠãå®å šãªããžã¿ã«ã©ã€ããéããŸãããïŒð»âš
ã³ã¡ã³ã