Home → Best Practices → Network Security → Firewall

1.8. Firewall

• Next Gen Firewall

  • Must Have Practices

    • Application Control

    • Intrusion Prevention

    • SSL Decryption for all traffic flows/sessions

    • Zone definitions to include, Outside, Inside, DMZ

    • Secure VPN access controlled via policy

    • Ensure proper firewall sizing based on needs

    • Ensure logging/reporting retention fits districts needs

    • Allow for connectivity to the outside Internet aggregation switch at ESU3

      • Districts should not traverse the ESU3 Private LAN

  • Best Practices

    • Log Analysis and Notifications of important events.

    • Web Content Filtering

    • Anti-Virus

    • Ensure maintenance contract matches life expectancy of hardware

    • Life cycle of device

      • Future growth

      • Hardware end of life