in some cases, it is desirable to prevent access to certain resources by unauthorized users on the lan. for example, a school’s administration office may be placed behind the internet firewall to restrict access to its computers by users in the student computer lab. similarly, an organization’s accounting, research, or other sensitive resources may be protected against unauthorized access by other users on the same network. by default, protected lan users can only access the internet and no other devices between the wan port and the internet. to enable access to the area between the internet firewall’s wan port and the internet

    (referred to as the intranet), you must specify intranet settings for the internet firewall.

    the following describes how to install and configure the internet firewall to provide intranet firewalling.

    to achieve intranet firewalling, connect the internet firewall between the free and the restricted segments on the lan, as shown in figure 48.

    figure 48 connecting the internet firewall to protect the intranet