• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 927
  • Last Modified:

Difference Between a Firewall and Layer 3 Switch

What is the difference between today's L3 Switches and a firewall?
0
dignified
Asked:
dignified
  • 4
  • 2
  • 2
1 Solution
 
bbrunningCommented:
A layer 3 switch is similar to a router. Today most layer 3 switches have the capabilities to put your traffic where you need like a router. A firewall is usually meant to block or manage incoming and outgoing traffic similar to a router but more secure and customizable.
0
 
dignifiedAuthor Commented:
But a full featured managed switch can block certain incoming and outgoing traffic can't it?
0
 
neoponderCommented:
Depends on the swtich and what it can do. The line is blurring between firewall/router/swtich. Most of them can do the some or all of the other.

i.e. cisco 3750 with Advanced Security IOS can act as nicly as a pix.  

Of course, it could be argued it does not do security as well as a $60,000 checkpoitn firewall cluster.

You have to decide on the level of security you need and look at the features of the device and see if they are there.  Like VPN, nat, Advanced access lists, etc.,

0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 
neoponderCommented:
Also, useally non-firewall's are lacking in the SPI arena.  So they will not be able to detecet advanced attacks or worms, viruses etc.
0
 
bbrunningCommented:
A full featured layer 3 switch can manage traffic inbound and outbound on a port to port (software and ahrdware) basis with access lists and everything.
In other words you can setup access lists and restrictions for port 3389 to only go through port 12 on your switch. Port 3389 meaning software port, port 12 meaning the actual physical port on the switch.
0
 
dignifiedAuthor Commented:
I see, seems that the SPI is the most important difference. I will look to get a firewall then.
0
 
bbrunningCommented:
You can't really put a decision between a switch and a firewall. The firewall only serves a specific purpose. Either way you'll need a switch if you have a network.
0
 
bbrunningCommented:
second though, was this a "small" home or office network you were talking about the whole time?
0

Featured Post

What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

  • 4
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now