We're going to basically change the Destination IP Address using either the static modules or destination modules. After, let's remind him that this is not like classified as an attack on the screen section. This is simply a protection from the most common attacks such as denial of service attacks. So the first thing that we're going to check is the screen. We're going to check if we have a session already established for that traffic, or if we didn't have a session, we're going to be processing the packet using these module here. So assuming that our Ingress interface is interface number one. Then after determining if little mining into traffic is able to go through the firewall, we going to send it out of the Egress Interface, and we're going to see how that works in this section. We're going to describe how each of these modules, where each of these steps work differently on the same course but a little bit later. The firewall then have flow d module which is able to provide next-generation firewall capabilities. Here at the interface level, we can configure traditional firewall rules, that will basically state layer three and layer four of the OSI model.

Basically, the way this works is that we're going to be receiving the traffic on interface number one. So assuming that our topic is going to ingrate the firewall on interface number one and the image interface is going to be interface number three.

We're going to use our Juniper SRX 240 firewall. This is just an example, and just to illustrate how a next-generation firewall works. In this video, you will learn to describe the flow of packets through a NGFW, and what inspections and services are performed at each step, identify the major NGFW vendors, and how their systems differ.

Ngfw networking