your organization’s security policy defines who can get into your network, where they can go, and who can get out. the security policy is enacted by your firebox’s configuration file.

    the configuration file you created using the quicksetup wizard is only a basic configuration. you should now create a configuration file that meets the requirements of your security policy. you do this by adding filtered and proxied services, in addition to the basic ones described in the previous section, that expand what you allow in and out of your firewall.

    every service brings trade-offs between network security and accessibility. when selecting services, balance the needs of your organization with the requirement that computer assets be protected from attack. some common services that organizations typically add, in addition to the ones listed in the previous section, are http (internet service) and smtp (email service).

    for more information on services, see chapter 8, “configuring filtered services”, and chapter 9, “configuring proxied services.”