Analysis of Firewall Policy Effectiveness in Filtering Network Traffic Using Elastic Stack

Abstract

This research is motivated by the increasing importance of network security in the digital age, particularly for organizations like Company X, given the rise in cyber threats that compromise data and system integrity. The study aims to analyze the effectiveness of the firewall policy in filtering network traffic using the Elastic Stack and to provide recommendations for improvement. The research methodology involves processing and analyzing firewall log data over one month using the Elastic Stack. The results demonstrate that the Elastic Stack successfully identified normal and suspicious traffic patterns, as well as the effectiveness of the firewall in blocking threats. The research also found connections with an "incomplete" status, indicating potential network communication issues. It is concluded that the firewall policy at Company X is generally effective, but there is room for improvement. This research recommends adjusting filtering rules, improving network segmentation, and implementing an intrusion detection system.