Motivation Consistency, Completeness and Compactness Because of the conflicts and order sensitivity of firewall rules, designing a firewall directly as a sequence of rules suffers from these three problems: the consistency problem, the completeness problem, and the compactness