One tiny little thing I really like about the M0n0wall is that it has a description field for Firewall policies. I have seen many high end firewalls that do not have any ability to document what rules are for and who set them up.
In addition to this it would be good to have a change log. Ideally when you hit the Save button anywhere you would be presented with a brief summary of what is about to be saved, followed by your name, date/time and an opportunity to add a comment. You then just confirm it. This can all go into a Change Control Log which gives you an audit trail of who set what when.
You may want to have a user/session based disable of this function so that you can disable it for the initial configuration or for experimenting. Ideally only a top level user could disable it. The support staff would need to log all changes.
Please give it some consideration,
Svend.
|
Topic: Change Log