How do you securely configure a firewall to allow necessary business traffic while blocking potential lateral movement?