需求
“A zero-trust network with Internet through SASE and SD-WAN to an edge router and perimeter firewall, a DMZ web server, a core switch and data center server, plus an internal firewall, microsegmentation firewall and access switch for a user PC, laptop and Wi-Fi access point.”
接著試試Add an identity provider connected to the SASE cloud.Add a protected database behind the internal firewall.
這張圖裡有什麼
看懂背後的決策。
01
Place SASE gateway at edge for secure internet and WAN access
02
Implement microsegmentation firewall to isolate access layer from core
03
Use VLANs to separate DMZ, user, and wireless traffic
When designing or documenting a zero-trust network architecture that leverages SASE and network segmentation for enhanced security.