Should we have an authority that "certifies" firewalls?
What would "certification" mean in a firewall?
Let's imagine a firewall test programme
How I test a firewall
Appendix A: The Orange Book on Testing
© Marcus Ranum. Reprinted with permission.
Find out more about VESARiA Firewall Testing.