A company connects development and production networks through a firewall. What is most important for the initial rule set?

1. Explicitly permit justified flows and deny other crossings
2. Allow development administrators unrestricted database access
3. Permit all traffic until an incident is confirmed
4. Copy all rules from an unrelated network