Network Security, Firewalls, and VPNs, 3rd Edition

Composing Firewall Rules

Setting up or defining rules for a home, portable host, or SOHO (small office/home office) environment can be fairly easy if the number of different types of access is minimal. But, as the number of controls, limitations, restrictions, and exceptions increases, it can become more complex to define rules properly. Obviously, larger networks with more advanced infrastructures and communications require more intricate rule sets.

The basics of defining or crafting rules are the same—or at least similar—across all firewall products. However, some firewalls support editing or writing the rules directly, while others employ a graphical interface or use a design wizard to accomplish this task. Software host firewalls, especially ...