You need to prevent users from sending e-mail messages that contain client account numbers through the Internet
You need to configure the ports that the external firewall will require for inbound and outbound access