A solicitação
“A zero-trust network with Internet through SASE and SD-WAN to an edge router and perimeter firewall, a DMZ web server, a core switch and data center server, plus an internal firewall, microsegmentation firewall and access switch for a user PC, laptop and Wi-Fi access point.”
Depois, tenteAdd an identity provider connected to the SASE cloud.Add a protected database behind the internal firewall.
O que há neste desenho
Entenda as decisões por trás dele.
01
Place SASE gateway at edge for secure internet and WAN access
02
Implement microsegmentation firewall to isolate access layer from core
03
Use VLANs to separate DMZ, user, and wireless traffic
When designing or documenting a zero-trust network architecture that leverages SASE and network segmentation for enhanced security.