依頼内容
“A zero-trust network with Internet through SASE and SD-WAN to an edge router and perimeter firewall, a DMZ web server, a core switch and data center server, plus an internal firewall, microsegmentation firewall and access switch for a user PC, laptop and Wi-Fi access point.”
次はこちらAdd an identity provider connected to the SASE cloud.Add a protected database behind the internal firewall.
この図に含まれるもの
図の背後にある意思決定を読み解く。
01
Place SASE gateway at edge for secure internet and WAN access
02
Implement microsegmentation firewall to isolate access layer from core
03
Use VLANs to separate DMZ, user, and wireless traffic
When designing or documenting a zero-trust network architecture that leverages SASE and network segmentation for enhanced security.