The request
“A security network with an attacker on the internet, an edge firewall, an IDS sensor, a DMZ switch hosting a web server, a core switch with a database server, and an access switch for an admin PC and security analyst.”
Then tryAdd a VPN gateway for remote administratorsAdd a second web server in the DMZ
What is in this drawing
Read the decisions behind it.
01
Placed IDS sensor inline at perimeter
02
Used DMZ for public-facing web server
03
Segmented internal network with core and access switches
Use this diagram as a template for building a physical or virtual security lab with separate security zones.
More like this