Français
3. Information System Security Policy (ISSP)
The PSSI defines all the filtering rules to be configured on the firewall. This involves specifying all TCP/IP services and protocols that can be accessed by users inside or outside the site to be protected. It can also cover content (if the filtering mechanism so permits). The security policy depends of course on the company's security needs, which have been identified in advance, but also on the firewall's ability to meet these needs, both in terms of performance and filtering.
As described in the document issued by the Agence Nationale de la Sécurité des Systèmes...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Information System Security Policy (ISSP)
Filtering at a glance
Bibliography
Bibliography
- (1) - ANSSI - Recommandations pour la définition d'une politique de filtrage réseau d'un pare-feu. - mars 2013 https://www.ssi.gouv.fr/uploads/IMG/pdf/NP_Politique_pare_feu_NoteTech.pdf ...
Software tools
Squid http://www.squid-cache.org
netfilter http://www.netfilter.org
SNORT http://www.snort.org
Websites
ANSSI, CSPN certified products https://www.ssi.gouv.fr/entreprise/produits-certifies/produits-certifies-cspn/
ANSSI, Common criteria certified products https://www.ssi.gouv.fr/entreprise/produits-certifies/cc/produits-certifies-cc/
...Standards and norms
- IETF, LEECH (M.), GANIS (M.), LEE (Y.), KURIS (R.), KOBLAS (D.), JONES (L.). – SOCKS Protocol Version 5. http://ietf.org/rfc/rfc1928.txt?number=1928 - rfc 1928 - 03-96
Regulations
Law no. 2009-1311 of October 28, 2009 on the criminal protection of literary and artistic property on the Internet, JORF no. 0251 of Oct. 29, 2009 https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000021208046&categorieLien=id
Law no. 2015-912...
The Ultimate Scientific and Technical Reference
