Firewall Policies and VPN Configurations - The Essential Field Guide for Multitasking Security Professionals

A firewall is as good as its policies and the security of its VPN connections. The latest generation of firewalls offers a dizzying array of powerful options; the key to success is to write concise policies that provide the appropriate level of access while maximizing security. This book covers the leading firewall products. It describes in plain English what features can be controlled by a policy and walks the reader through the steps for writing the policy to fit the objective. Because of their vulnerability and their complexity, VPN policies are covered in more depth with numerous tips for troubleshooting remote connections.

• Deploy a Network Security Policy
  Understand how your policy can have financial, usability, and legal impact.

• Deploy Multiple Firewalls
  Divide the network so that a compromise of one portion of the network will not result in the compromise of the entire network.

• Choose Your Hardware/Software Solution
  Learn the benefits of PIX, Nokia, ISA Server, Check Point, SonicWALL, and NetScreen configurations.

• Define a VPN
  Learn the pros and cons of SSH Tunnels, IPSec, SSL, VPN, CIPE, PPP-SSH, Layer 2 Solution, and MS PPTP.

• Examine Solutions for Constructing VPNs
  Harden the host operating system and then maintain and patch the OS and VPN application and review Openswan and OpenBSD.

• Implement a SOHO Firewall
  Design a firewall taking into account gaming, education, and business interactions, as well as Web, e-mail, and wireless access.

• Manage Security in a Medium-Size-Business
  Develop firewall policies on any size budget.