[j-nsp] Juniper firewall filters/stateful firewalls best practice

[Shawn Hargan]

Hello,

I'm working on a security audit with a Juniper M7i with built in ASP and 
an M10i with a discrete AS2PIC. Is there any documentation on typical 
best practices for Juniper firewall filters and stateful firewalls? I'm 
curious whether it's worth it to define firewall filters to block out 
easy traffic before the packets are passed to the stateful firewall, or 
if that AS2PIC has enough horsepower to make the basic filters moot.

Thanks for any insight.
-SH