NIST, Guidelines on Firewalls and Firewall Policy (NIST Special Publication 800-41) (Rev. 1) (Sept. 2009) (full-text).