Secure Enterprise Network Architecture

---

Goals

• Compare and contrast security implications of different on-premises network architecture models
• Apply security principles to secure on-premises network architecture
• Select effective controls to secure on-premises network architecture
• Ensure secure communications for remote access and tunneling

Enterprise Network Architecture

• Architecture and Infrastructure Concepts
• Security Zones
• Network Attack Surface
• Port Security
• Air-Gapped Isolation
• Network Architecture Considerations

Network Security Appliances

• Security Appliance Placement
• Security Appliance Attributes
• Packet Filtering Firewalls
• Firewall Selection and Placement
• Stateful Packet Inspection Firewalls
• Proxy Server
• Intrusion Detection Systems (IDS)
• Intrusion Prevention System (IPS)
• Next-Generation Firewall (NGFW)
• Unified Threat Management (UTM)
• Load Balancers
• Web Application Firewall (WAF)

Secure Communications

• Remote Access
• Transport Layer Security (TLS) Tunneling
• Internet Protocol Security (IPSec)
• Internet Key Exchange (IKE)
• Remote Desktop
• Secure Shell (SSH)
• Out-of-Band Management
• Jump Box
• Guidelines for Implementing Secure Enterprise Network Architecture