需求
“A security network with an attacker on the internet, an edge firewall, an IDS sensor, a DMZ switch hosting a web server, a core switch with a database server, and an access switch for an admin PC and security analyst.”
接著試試Add a VPN gateway for remote administratorsAdd a second web server in the DMZ
這張圖裡有什麼
看懂背後的決策。
01
Placed IDS sensor inline at perimeter
02
Used DMZ for public-facing web server
03
Segmented internal network with core and access switches
Use this diagram as a template for building a physical or virtual security lab with separate security zones.