Scene of the Cybercrime: Computer Forensics Handbook

Implementing System Security • Chapter 8 449

clients make requests, thus supporting dynamic port applications such as FTP.

This type of filter supports a wider range of protocols than a proxy system, but it

does not provide the detailed controls that a proxy system does.

When selecting a firewall to protect broadband connections, the user should

seek a product with all these filtering capabilities as well as extensive logging and

auditing features and alarms and alerts (the reasons these latter features are impor-

tant are covered in Chapter 9).Another good idea is to seek out products with

NAT and intrusion-detection capabilities (also covered in Chapter ...