Return to Answer

It is of utmost importance to identify what will influence your stance, and what level of security will be needed and the capability of enforcing it sucessfully:

• Your control/operation network

• Your layers inside your organisation

• Your industry

It is of utmost importance to identify what will influence your stance, and what level of security will be needed and the capability of enforcing it successfully.

Some factors to take in consideration:

• Control/operation network

• Organisation layers

• Industry

I see you too worried about the technical details, and not about the rest. Besides the basic golden firewalls rules, as to block ingress and egress networks, the others have to be properly evaluated.

You have to identify what will influence your stance, and what level of security you need and will be able to enforce:

Normally most of this network is not supposed to have any access from the normal network and much less from the outside. At most, it can communicate with a proxy to have access to software updates, and with the internal DNS servers.

This will be your corporate DNS, SMTP and proxies. They will have access to the outside.

You seem more worried about the technical details more than about the rest. Besides the basic golden firewalls rules, as to block ingress and egress networks, the others have to be properly evaluated.

It is of utmost importance to identify what will influence your stance, and what level of security will be needed and the capability of enforcing it sucessfully:

Normally most of this network is not supposed to have any access from the normal network and much less from the outside. At most, it can communicate with a proxy to have access to software updates, and with the internal DNS/NTP servers.

This will be your corporate VPN, DNS, SMTP and proxies servers. They will have direct, somewhat restricted access to the Internet.

I see you too worried about the technical details, and not about the rest. As @Stephane posted, there is a need to identify what to protect when dealing with a firewall policy.

I see you too worried about the technical details, and not about the rest. Besides the basic golden firewalls rules, as to block ingress and egress networks, the others have to be properly evaluated.

As @Stephane posted, there is a need to identify what to protect when dealing with a firewall policy.