We should put together a similar document for AG2. http://www.globus.org/security/v2.0/firewalls.html