Is NAT the Same as a Firewall?
| Question | |
| Is NAT the Same as a Firewall? | |
| Solution | |
| No. NAT capability is built into routers and firewalls. NAT is not a physical device, and it does not replace all the functions of these devices. A limited number of Internet IP addresses are available. An ISP may charge for additional addresses. NAT gets around this problem by effectively making all the computers on your LAN appear as a single IP. This has some security advantage, since it prevents outsiders from accessing your computers by means of IP address. Port forwarding or DMZ allows access to internal computers, even when using NAT, by opening only particular ports to the outside world. Once the ports are opened, of course, they become subject to attack. Therefore, the filtering done by firewalls, which goes beyond simply limiting access to ports and IP addresses, is still crucial to prevent attacks on your LAN. The detailed mechanics of NAT are fully described in RFC1631. |
|
| FAQ Details | |
| Category | Network Security |
| Keywords | NAT, Firewall |
| Helpful? | Yes | No Score: -6 |
| Views | 232 |
| Related Articles |
|