Defence-in-depth

Defence-in-depth

1. VPN

   • VPN services for remote access

2. ASA Firewall

   • Internal trafic can go out and come back, but external traffic cannot initiate connections to inside hosts

3. IPS

   • monitors incoming and outgoing traffic for attacks

4. ESA/WSA

   • Email security appliance (ESA)
     • filters spam and suspicious email
   • Web security appliance (WSA)
     • filters known and suspicious internet malware sites

5. AAA Server

   • This server contains a secure database of authorized users