I use Novell Border Manager 3 as our NAT/Firewall, and I am trying to
"improve" our security settings.

Currently I use Static Address Translation for our servers that must be
accessed from the "outside" and Dynamic Address Translation for our users
who "need" (ahem) to access the internet.

I would like to convert the Static addresses to application proxies and
apply some ACL's, but every time I think I have made a productive change,
either nothing happens or I shut off all traffic (not what I want).

Can anyone help?