Firewall policy

A simple firewall policy can enable a range of user functions, including:

• External users of the website can be forwarded to the external webserver in the DMZ
• Email messaging can be permitted in both directions in and out of the corporate network to the internet
• Users on the internal network can browse the internet
• Users on the internal network can browse the external webserver

This firewall policy can help control traffic and is another way of preventing intruders from gaining unauthorised access. For example, by keeping external users of the website in the DMZ using the webserver, those users are kept away from the internal network. Also, protocols can be used to filter traffic, for example known IP threats can be blocked by; white-lists (accept list) and black-lists (deny list) can limit which sites users can access. These controls can be established by listing them in the Firewall policy.