{"id":4626,"date":"2025-06-30T15:21:45","date_gmt":"2025-06-30T08:21:45","guid":{"rendered":"https:\/\/dncloud.net\/blog\/?p=4626"},"modified":"2025-08-12T15:30:07","modified_gmt":"2025-08-12T08:30:07","slug":"tuong-lua-la-gi","status":"publish","type":"post","link":"https:\/\/dncloud.net\/blog\/tuong-lua-la-gi\/","title":{"rendered":"T\u01b0\u1eddng l\u1eeda l\u00e0 g\u00ec? T\u1ed5ng h\u1ee3p t\u1ea5t t\u1ea7n t\u1eadt ki\u1ebfn th\u1ee9c v\u1ec1 Firewall"},"content":{"rendered":"

Hi\u1ec7n nay, vi\u1ec7c b\u1ea3o m\u1eadt m\u1ea1ng l\u00e0 y\u1ebfu t\u1ed1 then ch\u1ed1t \u0111\u1ec3 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u v\u00e0 h\u1ec7 th\u1ed1ng kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda. M\u1ed9t trong nh\u1eefng c\u00f4ng c\u1ee5 quan tr\u1ecdng nh\u1ea5t trong b\u1ea3o m\u1eadt m\u1ea1ng ch\u00ednh l\u00e0 t\u01b0\u1eddng l\u1eeda (Firewall). Nh\u01b0ng t\u01b0\u1eddng l\u1eeda th\u1ef1c s\u1ef1 l\u00e0 g\u00ec? N\u00f3 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o? V\u00e0 t\u1ea1i sao m\u1ecdi doanh nghi\u1ec7p v\u00e0 c\u00e1 nh\u00e2n \u0111\u1ec1u c\u1ea7n \u0111\u1ebfn n\u00f3? C\u00f9ng DNCLOUD<\/a> t\u00ecm hi\u1ec3u chi ti\u1ebft t\u1ea5t t\u1ea7n t\u1eadt trong b\u00e0i vi\u1ebft d\u01b0\u1edbi \u0111\u00e2y.<\/p>\n

T\u01b0\u1eddng l\u1eeda l\u00e0 g\u00ec?<\/h2>\n

T\u01b0\u1eddng l\u1eeda, hay Firewall, l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng b\u1ea3o m\u1eadt m\u1ea1ng \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 gi\u00e1m s\u00e1t v\u00e0 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp ra v\u00e0o m\u1ea1ng. T\u01b0\u1eddng l\u1eeda ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t r\u00e0o ch\u1eafn gi\u1eefa m\u1ea1ng n\u1ed9i b\u1ed9 an to\u00e0n v\u00e0 c\u00e1c m\u1ea1ng b\u00ean ngo\u00e0i kh\u00f4ng \u0111\u00e1ng tin c\u1eady, ch\u1eb3ng h\u1ea1n nh\u01b0 Internet hay c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng. M\u1ee5c \u0111\u00edch ch\u00ednh c\u1ee7a n\u00f3 l\u00e0 ng\u0103n ch\u1eb7n truy c\u1eadp tr\u00e1i ph\u00e9p, b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda v\u00e0 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt.<\/p>\n

B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 c\u1ea5u h\u00ecnh Firewall c\u1ee7a m\u00ecnh \u0111\u1ec3 cho ph\u00e9p ho\u1eb7c m\u1ee5c \u0111\u1ecbch ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng d\u1ef1a tr\u00ean nh\u1eefng y\u1ebfu t\u1ed1 nh\u01b0 giao th\u1ee9c, c\u1ed5ng m\u1ea1ng, \u0111\u1ecba ch\u1ec9 IP<\/a> hay nh\u1eefng \u1ee9ng d\u1ee5ng,…<\/p>\n

\"T\u01b0\u1eddng

T\u01b0\u1eddng l\u1eeda l\u00e0 g\u00ec?<\/p><\/div>\n

T\u01b0\u1eddng l\u1eeda ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n
\"T\u01b0\u1eddng

T\u01b0\u1eddng l\u1eeda ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/p><\/div>\n

T\u01b0\u1eddng l\u1eeda l\u00e0 m\u1ed9t th\u00e0nh ph\u1ea7n quan tr\u1ecdng trong b\u1ea3o m\u1eadt m\u1ea1ng, ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t c\u1ed5ng ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng gi\u1eefa c\u00e1c m\u1ea1ng ho\u1eb7c gi\u1eefa m\u00e1y t\u00ednh v\u00e0 m\u1ea1ng. Khi d\u1eef li\u1ec7u \u0111i qua Firewall, n\u00f3 s\u1ebd \u0111\u01b0\u1ee3c ki\u1ec3m tra v\u00e0 ph\u00e2n t\u00edch \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh xem c\u00f3 tu\u00e2n th\u1ee7 c\u00e1c quy t\u1eafc b\u1ea3o m\u1eadt \u0111\u00e3 thi\u1ebft l\u1eadp hay kh\u00f4ng. N\u1ebfu kh\u00f4ng ph\u00f9 h\u1ee3p, t\u01b0\u1eddng l\u1eeda s\u1ebd ng\u1eebng l\u01b0u l\u01b0\u1ee3ng \u0111\u00f3, ng\u0103n ng\u1eeba c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng.<\/p>\n

Firewall c\u00f3 th\u1ec3 ki\u1ec3m tra v\u00e0 gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng d\u1ef1a tr\u00ean c\u00e1c y\u1ebfu t\u1ed1 nh\u01b0 \u0111\u1ecba ch\u1ec9 IP, c\u1ed5ng, giao th\u1ee9c ho\u1eb7c c\u00e1c ti\u00eau ch\u00ed c\u1ee5 th\u1ec3 kh\u00e1c. \u0110i\u1ec1u n\u00e0y gi\u00fap b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng b\u1eb1ng c\u00e1ch \u0111\u1ea3m b\u1ea3o r\u1eb1ng ch\u1ec9 c\u00f3 l\u01b0u l\u01b0\u1ee3ng h\u1ee3p l\u1ec7 m\u1edbi c\u00f3 th\u1ec3 truy c\u1eadp v\u00e0o m\u1ea1ng, t\u1eeb \u0111\u00f3 gi\u1ea3m thi\u1ec3u nguy c\u01a1 x\u00e2m nh\u1eadp tr\u00e1i ph\u00e9p.<\/p>\n

Ngo\u00e0i ra, t\u01b0\u1eddng l\u1eeda c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 ho\u1ea1t \u0111\u1ed9ng theo c\u00e1c ch\u1ebf \u0111\u1ed9 kh\u00e1c nhau, bao g\u1ed3m ki\u1ec3m tra g\u00f3i d\u1eef li\u1ec7u, ki\u1ec3m tra tr\u1ea1ng th\u00e1i k\u1ebft n\u1ed1i, ho\u1eb7c th\u1eadm ch\u00ed b\u1ea3o v\u1ec7 tr\u00ean l\u1edbp \u1ee9ng d\u1ee5ng. T\u00f9y thu\u1ed9c v\u00e0o nhu c\u1ea7u b\u1ea3o m\u1eadt, c\u00e1c ch\u1ebf \u0111\u1ed9 n\u00e0y c\u00f3 th\u1ec3 linh ho\u1ea1t v\u00e0 hi\u1ec7u qu\u1ea3 trong vi\u1ec7c ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda m\u1ea1ng.<\/p>\n

Xem th\u00eam: Network l\u00e0 g\u00ec? Nh\u1eefng \u0111i\u1ec1u c\u1ea7n bi\u1ebft v\u1ec1 Network<\/strong><\/em><\/a><\/p>\n

C\u00f3 bao nhi\u00eau lo\u1ea1i t\u01b0\u1eddng l\u1eeda?<\/h2>\n

Hi\u1ec7n nay c\u00f3 2 lo\u1ea1i Firewall ch\u00ednh \u0111\u00f3 l\u00e0 t\u01b0\u1eddng l\u1eeda Personal v\u00e0 Firewalls. C\u00f9ng DNCLOUD t\u00ecm hi\u1ec3u ngay chi ti\u1ebft 2 lo\u1ea1i t\u01b0\u1eddng l\u1eeda n\u00e0y nh\u00e9:<\/p>\n

T\u01b0\u1eddng l\u1eeda Person<\/h3>\n

\u0110\u00e2y l\u00e0 lo\u1ea1i t\u01b0\u1eddng l\u1eeda \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 b\u1ea3o v\u1ec7 m\u00e1y t\u00ednh c\u00e1 nh\u00e2n v\u00e0 laptop kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1eeb Internet. T\u01b0\u1eddng l\u1eeda c\u00e1 nh\u00e2n c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p s\u1eb5n trong h\u1ec7 \u0111i\u1ec1u h\u00e0nh, v\u00ed d\u1ee5 nh\u01b0 Windows Firewall, ho\u1eb7c c\u00e0i \u0111\u1eb7t d\u01b0\u1edbi d\u1ea1ng ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt \u0111\u1ed9c l\u1eadp. N\u00f3 gi\u00fap gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng \u0111i v\u00e0o v\u00e0 \u0111i ra kh\u1ecfi thi\u1ebft b\u1ecb, ng\u0103n ch\u1eb7n k\u1ebft n\u1ed1i kh\u00f4ng mong mu\u1ed1n v\u00e0 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n.<\/p>\n

C\u00e1c lo\u1ea1i Firewall c\u00e1 nh\u00e2n ph\u1ed5 bi\u1ebfn hi\u1ec7n nay nh\u01b0 Microsoft Internet Connection Firewall, Symantec Personal Firewall, Cisco Security Agent v\u00e0 ZoneAlarm<\/strong> gi\u00fap b\u1ea3o v\u1ec7 m\u00e1y t\u00ednh kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda tr\u1ef1c tuy\u1ebfn, ki\u1ec3m so\u00e1t k\u1ebft n\u1ed1i m\u1ea1ng v\u00e0 ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp.<\/p>\n

Lo\u1ea1i t\u01b0\u1eddng l\u1eeda n\u00e0y r\u1ea5t d\u1ec5 s\u1eed d\u1ee5ng v\u00e0 ph\u00f9 h\u1ee3p v\u1edbi nh\u1eefng ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n ho\u1eb7c v\u0103n ph\u00f2ng nh\u1ecf.<\/p>\n

T\u01b0\u1eddng l\u1eeda Network Firewalls<\/h3>\n

\u0110\u00e2y \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Firewall m\u1ea1ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 b\u1ea3o v\u1ec7 to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng m\u1ea1ng c\u1ee7a t\u1ed5 ch\u1ee9c ho\u1eb7c doanh nghi\u1ec7p. N\u00f3 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng gi\u1eefa m\u1ea1ng n\u1ed9i b\u1ed9 v\u00e0 Internet<\/a>, ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb b\u00ean ngo\u00e0i nh\u01b0 virus, malware v\u00e0 c\u00e1c m\u1ed1i \u0111e d\u1ecda kh\u00e1c.<\/p>\n

T\u01b0\u1eddng l\u1eeda m\u1ea1ng th\u01b0\u1eddng \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh ph\u1ee9c t\u1ea1p h\u01a1n, v\u1edbi c\u00e1c ch\u1ee9c n\u0103ng n\u00e2ng cao nh\u01b0 gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng, ph\u00e2n t\u00edch g\u00f3i tin v\u00e0 \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt. Lo\u1ea1i n\u00e0y th\u01b0\u1eddng \u0111\u01b0\u1ee3c tri\u1ec3n khai trong c\u00e1c doanh nghi\u1ec7p l\u1edbn \u0111\u1ec3 b\u1ea3o v\u1ec7 nhi\u1ec1u h\u1ec7 th\u1ed1ng v\u00e0 m\u00e1y t\u00ednh trong m\u1ea1ng.<\/p>\n

T\u01b0\u1eddng l\u1eeda c\u00f3 nh\u1eefng nhi\u1ec7m v\u1ee5 g\u00ec?<\/h2>\n

T\u01b0\u1eddng l\u1eeda (Firewall) \u0111\u00f3ng vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c b\u1ea3o v\u1ec7 m\u1ea1ng v\u00e0 c\u00e1c thi\u1ebft b\u1ecb k\u1ebft n\u1ed1i kh\u1ecfi nh\u1eefng m\u1ed1i \u0111e d\u1ecda t\u1eeb b\u00ean ngo\u00e0i.<\/p>\n

N\u00f3 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t l\u00e1 ch\u1eafn b\u1ea3o m\u1eadt, ki\u1ec3m so\u00e1t lu\u1ed3ng d\u1eef li\u1ec7u ra v\u00e0o h\u1ec7 th\u1ed1ng m\u1ea1ng. D\u1ef1a tr\u00ean c\u00e1c quy t\u1eafc b\u1ea3o m\u1eadt \u0111\u00e3 \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp, t\u01b0\u1eddng l\u1eeda s\u1ebd x\u00e1c \u0111\u1ecbnh c\u00e1c g\u00f3i d\u1eef li\u1ec7u n\u00e0o \u0111\u01b0\u1ee3c ph\u00e9p truy c\u1eadp v\u00e0 ng\u0103n ch\u1eb7n nh\u1eefng ho\u1ea1t \u0111\u1ed9ng kh\u1ea3 nghi ho\u1eb7c \u0111\u1ed9c h\u1ea1i. DNCLOUD s\u1ebd ch\u1ec9 ra nh\u1eefng nhi\u1ec7m v\u1ee5 ch\u00ednh c\u1ee7a Firewall c\u1ee5 th\u1ec3 nh\u01b0:<\/p>\n