DMZ Building Guidelines

• Keep It Simple - KISS principle - the more simple the firewall solution, the more secure and more manageable

• Use Devices as They Were Intended to Be Used – don’t make switches into firewalls

• Create Defense in Depth – use layers, routers and servers for defense

• Pay Attention to Internal Threats – “crown jewels” go behind internal firewall – adage: “all rules are meant to be broken”