When we speak about network security, we often hear about terms like firewalls, Intrusion Detection System and Intrusion Prevention System. In this article, let us gain some understanding of these jargons.
The following table brings out a comparative analysis of firewalls, IDS, IPS and routers:
From the above analysis, it may be understood a router is a compulsory connecting device in a network when the network is connected to the internet.
Firewalls, IDS and IPS are not substitutes for each other but complement each other. Though it is generally believed that IPS would replace IDS in the future, IDS is a much more matured technology and cost beneficial when compared to IPS.
It is important to appreciate the fact that no single security device will be capable of stopping all attacks. The network security can be strengthened by implementing IDS or IPS with the existing security solutions like DMZs