Adding an Outbound Firewall

In this scenario, Acme Company is running TCP/IP and IPX on the network. Acme wants to use Novell® BorderManager^TM as an outbound firewall only, as shown in Figure 30. Acme wants to be able to do the following:

• Add an outbound-only firewall to secure the network
• Use a dial-up connection to the Internet Service Provider (ISP)
• Allow only internal users on the intranet to access the Internet
• Prevent Internet users from accessing or viewing the intranet

The following BorderManager components are used to implement this scenario, as shown in Figure 30:

• Packet filtering
• Network Address Translation (NAT)
• Proxy Services Transparent proxy application
• Access control

Figure 30
Outbound-Only Firewall

To implement BorderManager as an outbound-only firewall on the network, Acme Company must perform the following general sequence of steps:

1. Install BorderManager and enable packet filtering on public interfaces during the installation.

   For more information and BorderManager installation procedures, refer to the Novell BorderManager installation documentation.

2. Using the NIASCFG utility, enable and configure NAT for the WAN call to the ISP.

   More information about configuring these parameters is located in the NetWare 5^TM online documentation at the following path:

   Contents > Connectivity Services (under Network Services heading) > Routing Configuration

3. Using NetWare® Administrator, BorderManager Services page, enable and configure the Transparent proxy application.

   For more information and configuration procedures, refer to the Proxy Services online documentation.

4. Using NetWare Administrator, enable and configure access control rules for the intranet users.

   For more information and configuration procedures, refer to the access control online documentation.