Analyze this rule base:

Rules	Source IP	Source Port	Destination IP	Destination Port	Action
1	Any	Any	192.168.120.0	>1023	Allow
2	192.168.120.1	Any	Any	Any	Deny
3	Any	Any	192.168.120.1	Any	Deny
4	192.168.120.0	Any	Any	Any	Allow
5	Any	Any	192.168.120.2	25	Allow
6	Any	Any	192.168.120.3	80	Allow
7	Any	Any	Any	Any	Allow

Notes: The cleanup rule is the last rule in the rule base that covers other packets that have not been covered in the preceding rules.

1. Examine Rule 1 and state what security risk it poses in its current configuration. Described how this rule could be improved.

2. Is there a problem with the cleanup rule in the rule base? If so, what is the problem and how can it be remedied?

This discussion focuses on an insurance company that handles private medical data and accepts credit card payments for insurance premiums. Discuss why the following must be protected in this context (what are the risks):

Network

Servers

Clients

Other resources

Information/data

What are ways in which each of the above items can be protected in this context? Summarize your thoughts (remember to add the perspective of firewalls and VPNs to this scenario)