The ABCs of TCP/IP, 2nd Edition

232 The ABCs of TCP/IP

that organizational information is not read, an encryption firewall will allow

the firewall manager to define network addresses for packet encapsulation.

Then, packets destined to a different organizational network via the Internet

will flow through the Internet in encrypted form, with a newly formed header

using the address of a firewall on the destination network because that firewall

will now be responsible for decryption. Although the use of VPNs is in its

infancy, as their usage increases, one can expect an increase in demand for

encryption performing firewalls.

Network Address Translation

In concluding this examination of firewall features, this section focuses on

network address translation (NAT). NAT represents both a security ...