Three are two major ways to perform a system test: black box and white box. A black box tests involves knowing nothing about the internal operations of a system, only about its external properties. Conversely, a white box test involves looking into a system with knowledge about the internal composition.
A mix of these two techniques will be used to verify that the Ottawa Sun Publishing firewall is implementing the stated policies correctly.