Designing Security Services © 2004 Cisco Systems, Inc. All rights reserved. Implementing Network Security Using the SAFE Security Blueprints ARCH v1.26-1. - презентация

1 Designing Security Services © 2004 Cisco Systems, Inc. All rights reserved. Implementing Network Security Using the SAFE Security Blueprints ARCH v1.26-1

2 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Security and attack mitigation based on policy Security implementation throughout the infrastructure (not just on specialized security devices) Secure management and reporting Authentication and authorization of users and administrators to critical network resources Intrusion detection for critical resources and subnets SAFE Design Objectives

3 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v SAFE Design for Small Networks

4 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Small Network Internet Connectivity Module Components

5 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Small Network Attack Mitigation Roles for Internet Connectivity Module

6 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Small Network Campus Infrastructure Module Components

7 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Small Network Attack Mitigation Roles for Campus Infrastructure Module

8 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v SAFE Design for Medium Networks

9 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Medium Network Internet Connectivity Module

10 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Medium Network Attack Mitigation Roles for Internet Connectivity Module

11 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Medium Network Campus Infrastructure Module Components

12 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Medium Network Attack Mitigation Roles for Campus Infrastructure

13 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Medium Network WAN Module Key Devices and Mitigation Roles

14 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v SAFE Security Strategies for the Enterprise Campus

15 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Example: Secure Building Distribution and Access Submodules

16 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Example: Secure Network Management Module

17 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Secure Network Management Module Features

18 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Secure Server Farm Module Features

19 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Secure Edge Distribution Features

20 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v SAFE Security Strategies for the Enterprise Edge

21 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v E-Commerce Module Features

22 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Internet Connectivity Module Features

23 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote Access and VPN Module Features

24 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v WAN Module Features

25 © 2004 Cisco Systems, Inc. All rights reserved. ARCH v Summary SAFE serves as a guide for network designers considering the security requirements of their network. The SAFE design for a small network includes only a Internet Connectivity module that provides access to the external network, and the Campus Infrastructure containing the internal network. The SAFE medium network design consists of the Internet Connectivity module, the Campus Infrastructure module, and the WAN module. The SAFE large network design consists of the entire Enterprise Composite Network Model. The SAFE architecture defines the Enterprise Edge functional area as containing the Internet Connectivity, E-Commerce, Remote Access and VPN, and WAN modules.

26