Micro-segmentation conceptual design
The micro segmentation solution contains various components that must be integrated to make them work well together. These components range from networking devices and infrastructure services, to storage area network devices and applications. Each of these components has a large number of potentially valid configurations, but only a few of these configurations result in an integrated, functional system that meets the specified business and technical requirements of a solution.
The key components in the conceptual design are described in the following sections:
- Internal project networks: These networks represent the main project's workloads; these workloads can be virtual cloud-based, or legacy physical and virtual-based. The customer’s network security model allows systems of any type to reside in alternative networks classified in multiple zones: Intranet (ISZ), and Secured (Newyork). Standard rules of this network security model allow for VMs in Newyork...
