Discuss permissive versus restrictive firewall policies.

What will be an ideal response?

Permissive policy-Calls for a firewall and associated security components to allow all
traffic through the network gateway by default and then to block services on a case-by-
case basis.
Restrictive policy-Calls for a firewall and associated network security components to
deny all traffic by default. The first rule denies all traffic on any service and using
any port. To allow a specific type of traffic, a new rule must be placed ahead of the
"deny all" rule.