Overall protection of the TUnet against attempted attacks from the Internet, as well as protection of individual organizational units from unauthorized access within the TUnet.

TUfirewall is an important component in the implementation of TU Wien's information security and data protection strategy.

• Powerful, highly available firewall clusters between TUnet and the internet (IPv4 and IPv6)
• Basic protection for all end devices in TUnet (blocked ports between TUnet and the internet)
• Individually customizable protection for workstations, servers, laboratory equipment, and IoT through FWaaS (Firewall as a Service)

Internet Firewall (Perimeter Firewall):

Basic protection automatically covers all end devices in TUnet.

Normally, a device in TUnet is not accessible from the internet. The TUnet releaser of a structural element (organizational unit) can request the release of specific service groups (e.g., web servers) for specific end devices. Grouped firewall attributes are available for this purpose, which can be requested via a hostmaster ticket. Depending on the sensitivity, approval is then granted by the Campus IT Security Team.

The TU firewall only protects traffic between the internet and TUnet. For protection within TUnet, structural elements (organizational units) can either operate their own subnet firewalls or use the new FWaaS (Firewall as a Service) service. If you require this service or advice on this, please open a ticket to the TUfirewall queue, and we will contact you. We plan to integrate this service into the TUshop at a later date.