the conceptual approach that should guide the creation of firewall rules sets