Based on the prosed layout of the network I have come up with a design for the placement of the firewalls and decided what filters should be running on which ones. My decisions have been made in order to best protect the network against malicious attacks and unauthorized access to certain parts of the network without the proper permissions. The first line of defense is between the internet and the company’s network where I have placed the first firewall which includes the following filters; Static Packet filtering, NAT, Content filtering, Circuit Proxy, Application Proxy, and Dynamic Packet filtering. The reasoning behind this is; Static packet filtering focuses on the network layer (layer 3), specifically the header contents and will filter the bulk of packets making other filters operate more efficiently, this is why it should be the first line of defense of the filters being used (Stewart, 2011). The next service that isn’t a filter but is common among firewalls is Network Address Translation (NAT); it helps translate the internal addresses to external addresses and is usually listed as a filtering service. The next filter is the Content filtering which can be used to intercept specific content in a packet leaving the network before it reaches the internet because it looks at the domain name, URL, filename, or file extension that are found at the Application Layer (Layer 7) (Stewart, 2011). Next I included the Circuit Proxy as to keep anyone from initiating a session on the network that does not have any business on the network and works on layers 3 – 5. The next filter added was the Application Proxy which like the Circuit Proxy acts like a middleman between the client and server, this filter inspects traffic completely at any layer including the header and the payload unlike the Static Packet filter that can only check the header, with this filter active the client never has a direct connection with the resource server adding a layer of...