{"id":947,"date":"2025-12-19T10:49:49","date_gmt":"2025-12-19T09:49:49","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=947"},"modified":"2026-05-30T00:59:50","modified_gmt":"2026-05-29T22:59:50","slug":"ce-este-un-firewall","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-a-firewall\/","title":{"rendered":"Ce este un firewall?"},"content":{"rendered":"<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">\u00cen domeniul securit\u0103\u021bii re\u021belelor, al ingineriei sistemelor \u0219i al gestion\u0103rii infrastructurii cloud, men\u021binerea unui perimetru securizat reprezint\u0103 un standard opera\u021bional de baz\u0103. Un <strong>firewall<\/strong> (sau firewall de re\u021bea) este un sistem de securitate specializat \u2014 implementat sub form\u0103 de software, hardware dedicat sau serviciu cloud hibrid \u2014 conceput pentru a monitoriza, filtra \u0219i controla \u00een mod sistematic traficul de re\u021bea de intrare \u0219i de ie\u0219ire.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Func\u021bion\u00e2nd ca un filtru integrat, pozi\u021bionat \u00eentre o re\u021bea intern\u0103 de \u00eencredere (cum ar fi o re\u021bea intranet corporativ\u0103 privat\u0103) \u0219i o re\u021bea extern\u0103 ne\u00eencredere (cum ar fi internetul public), un firewall blocheaz\u0103 vectorii de acces neautoriza\u021bi \u0219i contracareaz\u0103 atacurile r\u0103u inten\u021bionate \u00eenainte ca acestea s\u0103 poat\u0103 p\u0103trunde \u00een straturile mai profunde ale sistemului.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Cuprins<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-a-firewall\/#Core_Operational_Mechanics_Allow_Reject_and_Drop\">Mecanisme opera\u021bionale de baz\u0103: Acceptare, respingere \u0219i renun\u021bare<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-a-firewall\/#Structural_Classifications_of_Firewall_Architectures\">Clasific\u0103ri structurale ale arhitecturilor de firewall<\/a><\/li><\/ul><\/nav><\/div>\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Core_Operational_Mechanics_Allow_Reject_and_Drop\"><\/span>Mecanismele opera\u021bionale de baz\u0103: Permitere, respingere \u0219i ignorare<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<\/div>\n\n<div id=\"mybox-2859172874\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Acces timpuriu<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Mai ave\u021bi nevoie de ajutor?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contacta\u021bi echipa noastr\u0103 de servicii pentru clien\u021bi.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Trimite mesaj<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">Un firewall evalueaz\u0103 fiecare pachet de date care \u00eencearc\u0103 s\u0103 treac\u0103 de grani\u021ba interfe\u021bei sale. Aceast\u0103 evaluare se bazeaz\u0103 \u00een \u00eentregime pe o matrice preconfigurat\u0103 de <strong>liste de control al accesului (ACL)<\/strong> \u0219i pe reguli de securitate definite de administratorii de re\u021bea. C\u00e2nd un pachet de date ajunge la firewall, sistemul compar\u0103 metadatele pachetului cu aceste reguli \u0219i execut\u0103 una dintre cele trei ac\u021biuni principale:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Permite (Accept\u0103):<\/strong> Pachetul de date se \u00eencadreaz\u0103 perfect \u00een criteriile de securitate stabilite (de exemplu, traficul provenind de la o adres\u0103 IP intern\u0103 verificat\u0103 care vizeaz\u0103 un port autorizat). Firewall-ul deschide poarta \u0219i redirec\u021bioneaz\u0103 pachetul f\u0103r\u0103 probleme de-a lungul traseului s\u0103u de rutare.<\/li>\n\n\n\n<li><strong>Respinge:<\/strong> Pachetul de date \u00eencalc\u0103 o regul\u0103 de securitate (de exemplu, un terminal extern neautentificat care \u00eencearc\u0103 s\u0103 se conecteze la un port al bazei de date interne). Firewall-ul blocheaz\u0103 intrarea pachetului \u00een re\u021bea \u0219i transmite \u00een mod activ un mesaj de eroare \u2014 cum ar fi un cadru ICMP \u201cDestina\u021bie inaccesibil\u0103\u201d \u2014 \u00eenapoi c\u0103tre expeditor, inform\u00e2ndu-l \u00een mod explicit c\u0103 conexiunea a fost refuzat\u0103.<\/li>\n\n\n\n<li><strong>Eliminare:<\/strong> Pachetul este marcat ca fiind extrem de suspect, r\u0103u inten\u021bionat sau parte a unei scan\u0103ri active a porturilor sau a unui atac distribuit. Firewall-ul blocheaz\u0103 datele, dar <strong>nu trimite niciun r\u0103spuns<\/strong> c\u0103tre surs\u0103. Pachetul pur \u0219i simplu \u00eenceteaz\u0103 s\u0103 mai existe pe cablu. Aceast\u0103 tehnic\u0103 de blocare silen\u021bioas\u0103 ascunde porturile active, l\u0103s\u00e2nd atacatorii \u00een \u00eentuneric cu privire la existen\u021ba unui server la adresa respectiv\u0103.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Structural_Classifications_of_Firewall_Architectures\"><\/span>Clasific\u0103ri structurale ale arhitecturilor de firewall<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tehnologia firewall-ului se adapteaz\u0103 la mai multe modele opera\u021bionale, \u00een func\u021bie de stratul din stiva de protocoale de re\u021bea pe care trebuie s\u0103 \u00eel inspecteze:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">1. Firewall-uri cu filtrare de pachete (arhitectur\u0103 f\u0103r\u0103 stare)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Cea mai simpl\u0103 \u0219i mai veche form\u0103 de ap\u0103rare a re\u021belei. Aceasta inspecteaz\u0103 pachetele de date individuale \u00een izolare complet\u0103 la <strong>Stratul 3 (Re\u021bea)<\/strong> \u0219i <strong>Stratul 4 (Transport)<\/strong> ale modelului OSI. Acesta verific\u0103 parametrii de baz\u0103 ai antetului \u2014 precum adresa IP surs\u0103, adresa IP destina\u021bie, tipul de protocol \u0219i numerele porturilor \u021bint\u0103 \u2014 \u00een raport cu tabele de reguli statice. Deoarece nu re\u021bine pachetele anterioare \u0219i nu urm\u0103re\u0219te starea general\u0103 a conexiunii, este extrem de performant, dar vulnerabil la atacuri de spoofing.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2. Firewall-uri cu inspec\u021bie bazat\u0103 pe stare<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">O configura\u021bie mai avansat\u0103 care urm\u0103re\u0219te \u00een mod activ starea conexiunilor de re\u021bea active. Acesta men\u021bine un <strong>tabel de stare<\/strong> dinamic pentru a re\u021bine canalele de comunicare deschise (cum ar fi un handshake TCP activ \u00een trei etape). C\u00e2nd sose\u0219te un pachet, firewall-ul verific\u0103 dac\u0103 acesta apar\u021bine unei bucle de conversa\u021bie deja stabilite \u0219i de \u00eencredere. Dac\u0103 pachetul sose\u0219te \u00een afara secven\u021bei sau nu are o intrare de stare valid\u0103 corespunz\u0103toare, firewall-ul \u00eel semnaleaz\u0103 ca o anomalie \u0219i \u00eel respinge instantaneu.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3. Firewall-uri pentru aplica\u021bii web (WAF)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Concepute special pentru a proteja aplica\u021biile software la <strong>Stratul 7 (Stratul de aplica\u021bie)<\/strong>. \u00cen loc s\u0103 se concentreze exclusiv pe adresele IP sau numerele de port, un WAF efectueaz\u0103 o inspec\u021bie aprofundat\u0103 a pachetelor asupra datelor efective din \u00eenc\u0103rc\u0103tura cererilor HTTP \u0219i HTTPS. Acesta analizeaz\u0103 parametrii URL, datele introduse \u00een formulare \u0219i anteturile cookie-urilor pentru a bloca exploit-urile specifice web-ului, precum injec\u021biile SQL (SQLi) \u0219i Cross-Site Scripting (XSS).<\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[25],"manual_kb_tag":[1044,1045,1046,205,444,990,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043],"class_list":["post-947","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-hosting","manual_kb_tag-unauthorized-access","manual_kb_tag-security-rules","manual_kb_tag-traffic-monitoring","manual_kb_tag-hardware","manual_kb_tag-access-control","manual_kb_tag-network-security","manual_kb_tag-firewall","manual_kb_tag-network-firewall","manual_kb_tag-network-traffic","manual_kb_tag-incoming-traffic","manual_kb_tag-outgoing-traffic","manual_kb_tag-security-software","manual_kb_tag-security-hardware","manual_kb_tag-internal-networks","manual_kb_tag-external-networks","manual_kb_tag-private-networks"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":2,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/947\/revisions"}],"predecessor-version":[{"id":8981,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/947\/revisions\/8981"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/media?parent=947"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manualknowledgebasecat?post=947"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb_tag?post=947"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}