CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks

The white paper "SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks" extends the principles discussed in the SAFE Enterprise white paper and sizes them appropriately for smaller networks. These smaller networks include branches of larger enterprise networks as well as standalone and small to medium-sized network deployments. The design also covers the telecommuter and the mobile worker.

The SAFE small network blueprint is shown in Figure 1-2. Here the emphasis is the application of the blueprint to a small, business network. The redundancy in device functionality inherent in the SAFE Enterprise white paper blueprint is removed to achieve cost-effective deployment of security throughout the network.

The SAFE midsize network blueprint is shown in Figure 1-3. In this blueprint, the complexity of the Corporate Internet Module is significantly greater than in the small network blueprint because of the additional demands of remote access through the use of VPNs. Additionally, this blueprint includes network intrusion detection systems (NIDSs) as part of the overall security strategy.

Finally, in the SAFE remote-user network blueprint, shown in Figure 1-4, the focus is on the flexibility of the designs. The objectives of SAFE can be met through more than one implementation method.