SP 800-41, NIST SPECIAL PUBLICATION: GUIDELINES ON FIREWALLS AND FIREWALL POLICY (JAN 2002)

SP 800-41, NIST SPECIAL PUBLICATION: GUIDELINES ON FIREWALLS AND FIREWALL POLICY (JAN 2002)., This document provides introductory information about firewalls and firewall policy primarily to assist those responsible for network security. It addresses concepts relating to the design, selection, deployment, and management of firewalls and firewall environments. This document is not intended to provide a mandatory framework for firewalls and firewall environments, but rather to present suggested approaches to the topic. This document is an update to NIST Special Publication 800-10, Keeping Your Site Comfortably Secure: An Introduction to Firewall Technology.2 That document dealt with the firewall landscape of 1994, and while the basic aspects of firewalls described in Special Publication 800-10 are still relevant, numerous aspects of firewall technology have changed. Special Publication 800-10 dealt with the basics of Internet Protocol (IP) packet filtering and application gateway firewalls, and outlined basic firewall configurations and policy. This document covers IP filtering with more recent policy recommendations, and deals generally with hybrid firewalls that can filter packets and perform application gateway (proxy) services. This document also contains specific recommendations for policy as well as a simple methodology for creating firewall policy.