Internet Security & Acceptable USe Policy

[Paul Mayerowitz <pmayerow @ photon . poly . edu>]

Our corporation is considering a connection to the Internet using a
regional Internet provider with an ANS Interlock and SecurID cards as a
secondary firewall.  With regard to this arrangement:

1) 	What security exposure exists with this firewall?

2)	What are the appropriate polices for the ANS Inter
lock?

3)	What are the appropriate acceptable use policies for employee use
of the Internet?