There must be a firewall between the server and any network which includes user computers. This can be a host-based firewall.See also: Level 3, Level 4, Manage Servers with Confidential Information, SB5, Servers B