Source: https://www.giac.org/paper/gsec/4433/case-study-successful-implementation-juniper-netscreen-idp/107195