
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 13
Thereasonstousemultipledevicesare:
1,
Onatrulysecurenetwork,multiplelayersoffirewallmustbeused.Theproposed
networksecurityarchitectureforGIACisdesignedbasedontheprincipleof
“defenseindepth”,wheresecurityisappliedinlayerstomakethelifeofhackers
muchharderthanexpected.
2,
Simplicity.Firewall technologycanbeasadvancedandcomplicatedaspossible,but
theunderlyingsecurityrulesandpoliciesshouldnot.LanceSpitznerinhisarticle
“BuildingYourFirewallRulebase”repeatedlyemphasizestheimportanceof
Comentarios a estos manuales