Discuss the roles and motivations for separately filtering ingress and egress traffic in the enterprise network. Describe separate conditions for both ingress and egress traffic as they transit the network. Discuss: What roles do ingress and egress filtering play in protecting a network? How do protective isolations help to protect a network? Why do we need to separate and isolate the types of traffic?

Ingress filtering is the filtering of any IP packets with untrusted source addresses before they have a chance to enter and affect your system or network. It can protect users from malicious attacks based on spoofing, where a hacker attempts to make a packet look like it originated from somewhere else. Internet service providers (ISPs) typically use ingress filtering to defend their customers and an individual home or office network can have additional safety measures in place. One major use for ingress filtering is to combat denial of service (DOS) attacks. These attacks rely on flooding networks with packets, many of which are spoofed to conceal their origins. The network can catch packets an ISP may not have identified as a problem, depending on the type of filtering used. This adds an extra layer of security for individual users, along with other safety measures like scanning incoming information for viruses and other malicious software that may pose a risk to the safety of computer systems or data on the network. It is also possible to compare the spoofing information against known databases to connect hacking attacks for the purpose of tracking infected computers and malicious users.
A network firewall is hardware and/or software designed to protect a network from unsafe network communications. A network firewall can permit only authorized messages to enter a network; this is ingress filtering.
Possibly condition ingress traffic to ensure that packets which