Návrh Firewalu v IPv6 sítích

Abstract

In the theorethical part, the diploma thesis covers current types of firewalls and general ways of their implementation, as well as elaborating on the fundamentals of how they work. Afterwards, the thesis covers differences between IPv6 and IPv4 protocols, address hierarchy, types of addresses and the consequences of those differences. The last section of the theoretical part covers protocol 6to4, which is then tested in practice. The practical part covers the process of implementing firewalls with deep application inspection on platform Cisco – Adaptive Security Appliance and Linux OS. The exact focus of application based firewalls are HTTP and FTP protocols, with both firewalls set to block a certain type of SQL injection attack, as well as blocking FTP commands based on the specified file type. The thesis offers performance tests of both implementations along with comparing the effects of application inspection on the data transferred within the network.