Implementing Policy
Each component of toolkit separately tailorable
Generally all components should enforce consistent policy
Suppose your inside network is 111.111 (class B)
- Firewall proxies and services permit free access from within network 111.111.*