Cfengine is a useful tool for implementing, monitoring and maintaining firewalls. You can control what programs are supposed to be on the firewall and what programs are not supposed to be there. You can control file permissions, processes and a dozen other things which make up the configuration of a bastion host. At some point in the future this space might expand into a discussion about how you set up a bastion host using cfengine.
Reference section
Go to the first, previous, next, last section, table of contents.