Firewalls are not about rules and obscurity but more about design and oversight. To often I see the methodology being used to lock down a network and the absolutely no due diligence on monitoring it. The perception is that a door locked with seven locks does not require surveillance. This is a template I created for a best practice network design. This is a deviation from the legacy firewall with DMZ designs.
My opinion is that this one is more practical and secure and something I first drew on a napkin. Read and view the full post on LinkedIn's Pulse here.