Physical firewall security

Physical access to the firewall must be tightly controlled to preclude any authorized changes to the firewall configuration or operational status and to eliminate any potential for monitoring firewall activity. In addition, precautions should be taken to ensure that proper environment alarms and backup systems are available so the firewall remains online.

Tip The organization firewall should be located in a controlled environment, with access limited to a network services manager, the firewall administrator, and the backup firewall administrator.

Tip The room in which the firewall is to be physically located must be equipped with heat, air conditioner, and smoke alarms to ensure the proper working order of the room. The placement and recharge status of the fire extinguishers should be checked regularly. If uninterruptible power service is available to any Internet-connected systems, such service should be provided to the firewall as well.