Building a solid rulebase is a critical, if not the most critical, step in implementing a successful and secure firewall. Security admins and experts all over the Internet argue what platforms and applications make the best firewalls. We compare stateful inspection tables, application based filtering, fragmentation and reassembly, etc. However, all of this is meaningless if your firewall rulebase is misconfigured. Far too often in my security audits I see $50,000 firewalls exposing organizations to great risk, all because of a misconfigured rule. That is the purpose of this paper, to help you plan, build, and maintain a solid and secure firewall rulebase. The information covered here applies to most firewalls, but I will be using Check Point FireWall-1 as an example. Regardless of what type of firewall you use, the basic concepts of rulebase design remain the same.
Read Entire Paper
E-Mail Link
Your IP address will be sent with this e-mail
