요청 내용
“A DMZ web application security architecture with Internet to an edge router and external firewall, then a WAF, load balancer, two web servers, an application server, an internal firewall, two database servers and a domain controller.”
그렇다면Add a bastion host in the DMZ.Add a backup database server in the internal zone.
이 도면에 담긴 내용
그 이면의 의사결정을 읽어 보세요.
01
Use of DMZ to isolate public-facing services
02
WAF for web attack protection
03
Internal firewall for backend segmentation
When building internet-facing web applications requiring defense in depth and compliance.