Your company security policy. The security policy should define the communication allowed with external sources and between various segments of the corporate intranet.

Your current network topology. You need to know the physical layout of the network components.

Information about other firewall components. You need to know what other security measures are in place (or will be in place) so that you do not inadvertently circumvent or disable those measures.