Recommendations for Secure Configuration of SNS Firewall

This guide provides recommendations for the secure configuration of a Stormshield Network Security (SNS) firewall, specifically version 4.3 LTSB. The document outlines best practices for deploying SNS firewalls in both physical and virtual environments. It emphasizes that the recommendations are not prescriptive and should be adapted to the specific information systems in use. The guide covers various functions including administration, filtering, IPsec encryption, monitoring, backup, and logging. It also details the configuration modes available for SNS firewalls and the SMC server, highlighting the importance of using personalized accounts for administrators to ensure accountability. The recommendations are structured to allow readers to select solutions that match their security requirements, with different levels of security provided for various scenarios. Additionally, the document references relevant ANSSI publications for further guidance on firewall policies and system interconnections.