Determining Your Security Policy

Before installing the SunScreen software, determine your network security policy. For a more thorough discussion of this topic, read Computer Security Policies and SunScreen Firewalls by Kathryn M. Walker and Linda Croswhite Cavanaugh from Sun Microsystems Press, Prentice Hall, 1998, ISBN 0130960150. This book and additional resources are listed in the Preface.

General considerations when creating a security policy are:

• What services do employees need to access?

• What services do customers need to access?

• Will you allow Internet access and, if so, what services do users need to access?

• What type of threat are you trying to protect your company from?

• Do you need to use network address translation (NAT)?

• Do you need to use proxies?