Each of the entry point from the internet to the internal (private) network must be protected securely by a firewall. A Secure firewall should be able to control the flow of traffic between protected and un-trusted networks. All connections between protected and un-trusted networks must be forced to pass through a single concentrated checkpoint which [...]