What should you recommend?
What should you do first?
What should you do?
What should you include in your plan?
Which traffic should you permit through the firewall?
Which functional levels should you include in your plan?