现在网络的复杂性使对整个边界、应用和用户的纵览的维护变得非常困难。IT人员经常有变更、新应用会添加,用户来来去去或者角色发生变化。这些变化都要求对防火墙规则作出变更,许可证也会很快变得混乱。本文旨在提供一些对于任何现代防火墙配置的指导意见或最佳实践。它不会告诉我们如何去做,相反,它指导我们配置防火墙时应该思考些什么。 The complexity of the network now makes it very difficult to maintain an overview of the entire border, applications and users. IT staff often change, new applications are added, users come and go, or roles change. These changes all require changes to the firewall rules, and licenses can quickly become confusing. This article is designed to provide some guidance or best practices for any modern firewall configuration. It does not tell us how to do it. Instead, it guides what we should think about when configuring a firewall.