1. DNS Configuration: How does the firewall provide address translation for both inside and ouside hosts?
2. Can IP Routing be turned off? Will ICMP Redirects affect the FW? Is IP Source routing enabled? Can it be turned off?
3. What services are provided on the firewall? How are they implemented?
4. What are the consequences if a hacker subverts the gateway? How do you detect this?