What it involves
Adding and removing rules, firmware updates, network segmentation, secure publishing of services and remote-working VPN with two-factor authentication. Quarterly review of the configuration, because a firewall that has gone three years without one piles up rules that no longer protect anything. Reports on blocked traffic and on remote access.
