textarea=In order to determine the level of robustness needed in your organization, refer to the National Security Agency's DoD Firewall Guidance document for a step-by-step process. In this document, the first step is to define what is to be protected. For example, is it the entire enclave or only a segment of it? You should identify the requirements for confidentiality, determine the criticality of the system's mission, and verify the operating environment. To do this, determine the answers to questions such as:
Is the information being protected unclassified, controlled unclassified, or classified?
What is the mission category of your system: mission critical, mission support, or administrative?
What is the type of network topology: LAN-to-LAN, LAN-to-WAN, or WAN-to-WAN?
Consult the Resources page for more information on this topic.
