安装防火墙的十二个注意事项（Twelve considerations for installing a firewall）.doc

安装防火墙的十二个注意事项（Twelve considerations for installing a firewall） Twelve considerations for installing a firewall Firewall is the first barrier to protect our network. If this line of defense falls, then our network will be dangerous! So we need to pay attention to the precautions for installing firewalls! 1 firewall implements your security policy Firewalls have enhanced some security policies. If you havent made your security policy before you put the firewall in, then its time to make a decision. It can not be written, but it can also serve as a security policy. Installing firewall is the best thing you can do to protect your site, and its not easy to maintain it at any time if you havent made sure what the security policy should do. To have a good firewall, you need good security policies written and accepted. 2, a firewall is not a single device in many cases Unless in particularly simple cases, firewalls are rarely a single device, but a set of devices. Even if youre buying a commercial all-in-one firewall application, youll have to configure other machines (such as your web server) to run with them. These other machines are considered part of the firewall, which includes the configuration and management of the machines, what they trust, what makes them believable, and so on. You cant simply choose a device called a firewall and expect it to take on all security responsibilities. 3, firewalls are not readily available products at any time Choosing a firewall is more like buying a house than choosing where to spend it. A firewall is similar to a house. You have to stay with it every day, and you use it for more than one or two weeks. All need to be maintained, otherwise it will crash. Building a firewall requires careful selection and configuration of a solution to meet your needs, and then continually maintain it. A lot of decisions need to be made, and the right solution for a site is often wrong for another site. 4 firewalls dont solve all of your problems Dont