Propuesta para la implementación de un sistema seguridad perimetral mediante la protección cortafuegos de próxima generación aplicable para pequeñas y medianas empresas del cantón Guaranda.

Abstract

The aim is to propose implementing a perimeter security system through protecting next-generation firewalls for small and medium-sized companies in the Guaranda canton. It began by studying the current standards and regulations regarding perimeter security for SMEs information was also collected with a qualitative methodological approach, desktop research, and field of various documents on the subject. With the gathered information, a laboratory-type test scenario was expanded and subsequently defined with a team with security functions and a next-generation firewall (NGFW) using a new technology that is stateful packet inspection (SPI). which is an advanced security mechanism that inspects packets and performs connection status monitoring on the network, controls active connections, and decides which incoming or prominent packets are allowed to enter or leave the corporate network to prevent harmful traffic from entering. The next point was the evaluation of the system through the structure of the layers of the OSI model, where the traffic in the transport layer was analyzed, together with the monitoring of the states of the network connections, such as UDP communication and the TCP streams that pass through the firewall, distinguishing legitimate packets from illegitimate packets headed for the company network. Finally, it is shown that state-of-the-art NGFW firewalls, in addition to blocking traffic based on the controls established by security policies, perform deep packet analysis, and actively search for patterns that may indicate malicious activity; Periodic backup of business-critical information is recommended, either to a cloud space or to an external hard drive.