Please design and draw a “Simple” network architecture that allows users in the
ID: 3884898 • Letter: P
Question
Please design and draw a “Simple” network architecture that allows users in the untrusted domain to communicate with systems in the trusted domain employing the use of Boundary Router, SMPT Server, Firewall(s) and DMZ. Explain your design from a security perspective. From the design also add sensor point indicators on your design to show where you would sniff traffic with one or more Network-Based Intrusion Detection Systems (NIDS). Explain what the reasoning is (what you expect to detect) from a security perspective. Are there any potential drawbacks to consider?
Explanation / Answer
Dual-homed or dual-homing can refer to either an Ethernet device that has more than one network interface, for redundancy purposes, or in firewall technology, dual-homed is one of the firewall architectures, such as an IDS/IPS system, for implementing preventative security.