Network readiness

This section deals with pointers that are specific to our network sections. It will give you a high-level overview of network-related design and implementation parameters:

Sr. no.	Point	Description
1	Optimal firewall rules are a must	This is very important. Always implement both INBOUND and OUTBOUND firewall rules when configuring a firewall. This could save you a lot in the event of a breach.
2	Make sure to have a firewall justification document	After few months when one goes and looks into firewall rules, they may not remember why was this rule implemented in the first place. Without a firewall justification document, it is difficult to look into the description of each and every rule and if a new security engineer joins up, he won't have any idea of why a specific rule is present in the first place.
3	Have a bastion/VPN	Always make sure your architecture has a bastion and/or VPN solution. None of the environment should be open to the internet unless needed. OpenVPN is a great tool...