Services that can be associated with the firewall
Firewall service technical specifications
The firewalls offered by Aruba Cloud:
- include 1 additional IP address;
- support VPN;
- operate in Transparent or NAT mode;
- support 1 Gb/s connectivity;
- do not support aggregated 200 Mb/s or 2 Gb/s connectivity.
Firewall models offered by Aruba Cloud
| |
Antivirus |
Antispam |
IPS [1] |
| pfSense Netgate 1100 |
— |
— |
— |
| Fortinet Fortigate 40F |
● [2] |
● [2] |
● [2] |
| Fortinet Fortigate 60F |
● [2] |
● [2] |
● [2] |
| Fortinet Fortigate 40F UTP |
● [3] |
● [3] |
● [3] |
| Fortinet Fortigate 60F UTP |
● [3] |
● [3] |
● [3] |
1. IPS (Intrusion Prevention Systems) - Signature Anomaly Detection.
2. License cost not included in the firewall fee.
3. License cost included in the firewall fee.
Transparent mode
The
Transparent mode (also known as
bridge mode) is so called because the device is effectively transparent, as it does not appear on the network, while still supporting internal and external interfaces.
Incoming and outgoing traffic is inspected by the firewall without being modified, in the same way as traffic passing through a switch. Firewalls operating in this mode are therefore not detected during network scans, which means they cannot be targeted by direct attacks. This mode also significantly reduces resource usage because network traffic does not need to be routed. Another important advantage is that a firewall can be added in Transparent mode without changing the IP addresses of other devices.
Some of the features of Transparent mode:
- the firewall unit is invisible to the network;
- all its interfaces are on the same subnet;
- the firewall unit can use a management IP address for administration.
NAT mode
The
NAT (
Network Address Translation) mode is the most commonly used mode and is designed to connect local networks to the Internet and vice versa.
It is a mechanism that modifies the IP addresses of packets passing through devices such as routers or firewalls. These devices perform network address translation before forwarding the IP packets to the destination network with the updated information. NAT also became essential when IPv4 addresses began to run out.
With NAT, at least one network interface is connected to the internal network and at least one network interface is connected to the Internet.
The default private network for this mode is 192.168.1.0/24
Some of the main features of NAT mode:
- it is used when the firewall unit acts as a gateway between public and private networks;
- it can act as a router between multiple networks within a network infrastructure;
- each interface must be assigned an IP address that is valid for the subnet to which it is connected.