Question

You are designing a Demilitarized Zone (DMZ) for a huge corporation.

By means of design best practice, and information that you have learned so far, suggest a design that will provide following capabilities-

1. Protected WEB server hosting environment,

2. Supply Internet browsing capability for internal users,

3. Internal users access to the WEB servers for maintenance,

4. VPN access to internal system from Internet,

5. Classify the use and location of Firewalls where necessary, and

6. Categorize the use and location of IPS or IDS where necessary.

A. offers a diagram showing, Internet, WAN and all security components with the flow of traffic for each.

B. describe functions of each component, why you selected them, and the why you selected that location in data flow.