hi
The basic guideline for the firewall must at least certified by Common
Criterial. EAL4, pls visit the site for info.
http://www.commoncriteriaportal.org/public/consumer/index.php?menu=4
2ndly, what kind of firewall are you looking at, is much better to use a
appliance firewall where the OS has stripped down as less problem on the OS
patching.
3ndly, what is the use of the firewall, my principle is to use KISS (Keep it
sample and stupid). It means that use the firewall as firewall gateway only.
if VPN is used, can consider other production on top of the firewall.
4th, use statefull firewall instead application and packet filtering.
Stateful is much secure where application may have maintainence issue.
hope that this will help you.
thanks
----- Original Message -----
From: "Kenya Hunter" <kenya.hunter@leumiusa.com>
To: <firewalls@securityfocus.com>
Sent: Wednesday, December 15, 2004 4:53 AM
Subject: Firewall Security Guidelines
Good Afternoon,
I am trying to write a security minimum security baseline for firewalls
and wanted to know if anyone knew where I could find some already
published versions out on the web. I am looking for all different
firewalls like: checkpoint, pix, cyberguard, and e.t.c.
Thanks.
Kenya
***********************************************************************************
The information contained in this e-mail message is privileged and
confidential and is intended only for the use of the recipients (individuals
or entities) referenced herein. If the reader of this message is not the
intended recipient or the employee or agent responsible for delivering it to
the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please immediately notify us by
reply e-mail (at the sender's address) or by telephone and delete this
message file from all networks, discs, backups and/or computers.
