요청 내용
“A zero-trust network with Internet through SASE and SD-WAN to an edge router and perimeter firewall, a DMZ web server, a core switch and data center server, plus an internal firewall, microsegmentation firewall and access switch for a user PC, laptop and Wi-Fi access point.”
그렇다면Add an identity provider connected to the SASE cloud.Add a protected database behind the internal firewall.
이 도면에 담긴 내용
그 이면의 의사결정을 읽어 보세요.
01
Place SASE gateway at edge for secure internet and WAN access
02
Implement microsegmentation firewall to isolate access layer from core
03
Use VLANs to separate DMZ, user, and wireless traffic
When designing or documenting a zero-trust network architecture that leverages SASE and network segmentation for enhanced security.