Skip to main content
Institute of Advanced Technological and Commercial Studies

Glossary

Firewall: the boundary that enforces a policy

A firewall permits or turns away network exchanges according to a written policy. Its value rests on the clarity of that policy far more than on the power of the device. Segmentation, justified rules and logging are what make it solid.

One policy, applied to every exchange

A firewall examines the exchanges crossing a network boundary and applies a policy: what is explicitly permitted passes, the rest stops. The quality of the arrangement rests on three things: segmentation that isolates what needs isolating, a readable rule set where every line is justified, and logging that lets an exchange be reconstructed afterwards.

  • What is explicitly permitted passes, the rest stops
  • Every rule carries its reason, its author and its review date
  • Logging makes it possible to reconstruct an exchange afterwards

What makes a policy sustainable

The Cybersecurity programme has candidates build a complete policy on a segmented architecture, then puts it to the test through an offensive exercise. The Networks and Cloud Computing programme sets it in day-to-day operations: periodic rule review, removal of rules that no longer serve, traceability of changes.

Segmentation

Separate zones by sensitivity: an incident in one stays contained within one.

The rule set

Every line carries its reason, its author and its review date: an orphan rule gets removed.

Logging

What passes and what stops is recorded, retained long enough for analysis.

Periodic review

The rule set is re-examined at fixed intervals: that is what keeps the policy readable over time.

Programmes where you configure one

2 catalogue programmes put “Firewall” to work: 240 credits and 2400 taught hours in total. The official rule holds throughout — one credit stands for 25 hours of work, 10 of them taught. Every line below is recomputed from the programme page: level, duration, credits, taught volume and fees in Guinean francs appear exactly as filed in the official catalogue.

ProgrammeLevelDurationVolumeFees
Cybersecurity programme — Bac+5 levelMaster's degree2 years120 credits · 1200 taught hours7 500 000 GNF per year
Networks and CloudBachelor's degree2 years120 credits · 1200 taught hours5 600 000 GNF per year

The details that matter

Is a firewall enough to secure a network?

It is one layer among several. The Cybersecurity programme installs the whole set: segmentation, authentication, logging and detection.

How do you keep a rule set readable?

By documenting every rule when it is created and re-examining it on a fixed date. A rule whose reason has gone gets removed.

Does the programme work on real equipment?

On complete environments to configure, secure and bring back into service, within the taught hours of practical work.

Firewall: the boundary that enforces a policy — Glossary | IHETC — IHETC