Firewall Best Practices

[bberry]

I am looking for information regarding best practices for setting up a firewall. I am just getting my research stated and seem to still have a ways to go. There seem to be varyion opinions on how to approach this. I am planning to implement address restrictions to block space such as 192.168.x.x, 172.16.x.x,and 10.x.x.x. I also know that ports such as 445, 135, 137, 138, and 139 do not need off the LAN. Is there anything else that should definately be blocked? Anyone have recommendations on articles, white papers or books?

[jmia]

Brent,

You can take a look at the Cisco SAFE Security Blueprint -- you can find the link on the right hand side of this page under 'related links' --->>

Hope this helps out.

Jay

[bberry]

Jay,

Thanks .. That is the one that I am going through now. Another one that I was directed to was the following.

http://www.nsa.gov/snac/support/sixty_minutes.pdf

This even goes so far as to give recommended TCP & UPD ports to block at the perimeter.

[jmia]

Brent,

I forgot to add that link from NSA!! well at least you found it.. happy reading.

Jay