CNIT 122
Firewalls

Course Information

Course Objectives:

Firewalls are among the best-known security tools in use today, and their critical role in information security continues to grow. However, firewalls are most effective when they are backed by effective security planning, a well-designed security policy, and when they work in concert with anti-virus software, intrusion detection systems, and other tools. This book aims to explore firewalls in the context of these other elements, providing readers with a solid, in-depth introduction to firewalls that focuses on both managerial and technical aspects of security. Coverage includes packet filtering, authentication, proxy servers, encryption, bastion hosts, virtual private networks (VPNs), log file maintenance, and intrusion detection systems. The second edition offers updated content and brand new material, from enhanced coverage of non-firewall subjects like information and network security to an all-new section dedicated to intrusion detection in the context of incident response.

Prerequisite: CNIT 103. 

Textbook: Network Security, Firewalls and VPNS by J. Michael Stewart and Denise Kinsey ISBN 978-1284183658

Grading: Letter grade based on accumulated points as follows:

Quizzes  33

Homework  33

Discussion Posts 34

Requirements: 

As this is an on-line course, Internet connectivity from home, office or library will be needed. In addition to the weekly readings in the texts, there are chapter questions, quizzes, and additional research. Some reports will be in the form of postings to the Discussion Board, some will be short printed papers. 

Feel free to post comments or questions to the Discussion Board or meet for discussions in the Chat Area at any time. For Tips, see how to take this course

Be sure to check your Canvas email frequently, and check the course web page weekly to see new announcements.

Discussion/Forum requirements: There will be discussion questions posted every 1.5 weeks, you must post and/or discuss in at least 80% of these to get full credit.

Attendance Policy: If you miss more that 2 classes, I may drop you.   I will try to contact you before I drop you to see what is happening. 

Please remember participation in the class includes taking quizzes, participating in forums, and completing assignments, not just logging into class.

Homework will be accepted up to 1 week late, but will have one letter grade less full credit maximum. 

Questions? Post in the class Discussion Board, send me an e-mail (dtaha@ccsf.edu), or setup an appt. The Final Exam will be comprehensive and will be given online during finals week.

Course Schedule: There are 10 Chapters in the book. We will cover about one chapter every week. There are 10 Homework assignments, you must complete 6 of them for full credit. Pick which interests you and complete those. When you login to Insight you will see the detailed Calendar of Topics, Assignments, Quizzes. 

Communication Guidelines: Online you will also find some guidelines for class participation, and links to the CCSF Computer Policies. In general, following good Netiquette (communication guidelines for the Internet) is recommended and expected.

Major Learning Outcomes

Student Learning Outcomes:

The below SLOs will be covered in this class. At the end of the semester, students will be able to do the following:

1. Describe network security vulnerabilities when connected to the Internet

2. Describe the required features of an effective firewall

3. Define and differentiate between packet filtering firewalls and NAT. 

Achievement will be tested as part of the Final Exam.