Firewall Design

Firewall platform: OPNsense. Policy model: default deny, explicit allow, no direct management exposure to the Internet and administration through VPN and jump host.