The request
“A penetration-testing lab: the internet connects through an edge router and firewall to a lab switch with a Kali attacker machine, target machine, vulnerable server, IDS sensor, and a SIEM console on a separate VLAN.”
Then tryAdd a second target machineAdd a VPN connection for the SIEM console
What is in this drawing
Read the decisions behind it.
01
Include IDS and SIEM for monitoring
02
Separate management VLAN from lab traffic
03
Use tiered layout for clarity
Use this diagram as a blueprint for creating a safe and controlled penetration testing lab with monitoring capabilities.
More like this