Hi guys,
We 're refreshing our network with NGFWs and we need to start segmenting our relatively flat network
I will work with network engineers but as project manager I would like to hear from networking specialists if I can find any online resources that helps designing segmentation properly. The current state is a subnet for workstations and a subnet for servers in each location we have.
Moving forward we'd ideally have proper segmentation for:
- management (iDracs, management interaces for swicthes, SAN, routers,...)
-printers
-servers
-AD
-DMZ for SFTP (we do not have any public facing services except SFTP servers)
- Global Protect VPN clients
We have enabled LDAP integration for our Palo Alto FWs so we will be able to apply policies based on users or groups.
I know this is a broad topic but are there any resources online that could help me?
No comments:
Post a Comment