Estudio de factibilidad técnica para la implementación de un firewall de nueva generación en la Red de Datos de la Universidad Distrital Francisco José de Caldas

Abstract

This document is presented in search of security alternatives for the current implementation used by the Universidad Distrital Francisco José de Caldas regarding the methods that protect perimetrally the data network of the institution, in such a way it seeks to provide support to the current acquisition process of a New Generation Firewall that has the university because of the vulnerabilities faced by the data network. The collected information is documented in relation to the distribution of the network in the university and its characterization is made looking for possible improvements together with the selection of perimeter security devices, reports of use of the network regarding applications, protocols are presented, amount of data that transits and operating characteristics of the data network of the Universidad Distrital. Finally, the tests that have been done in the Universidad Distrital with new generation firewalls - NGFW are shown, leaving evidence of the configurations of the device in case of a definitive implementation, marking the support guidelines that are sought to be able to complement the security in the network and ensure a correct and continuous operation of the same, in conclusion, the analysis of results is made to each of the devices tested in the data network and a comparison is made with the code method open (open source) that the University currently implements as perimeter security.