Firewall Procedures

1. Require 24 hour lead time for all firewall rule change requests.

2. All firewall rule changes will be made before 7am each weekday morning or as scheduled with Change Management.

3. All firewall rule change requests must include the following pieces of information:

  • Source address(es), including IP's and domain names (where applicable)
  • Destination address(es), including IP's and domain names (where applicable)
  • Port(s) requested to be open
  • Date when the change should be made
  • Point of contact
  • Department name

4. All firewall rule change requests will be evaluated to ensure that they conform to current security best practices and current Emory security policy.

5. Emergency firewall rule change requests must be approved by the Information Security Manager.