Internal employees are allowed unrestricted access to the Internet. Provide the Internet access to the company's webserver and Internet email Any traffic coming into the corporate internal network must be securely authenticated and encrypted Obviously most organizations's security policies are far more complex then this. However, for the purposes of this paper, this will do. Do not be deceived, you will soon see how even this simple security policy can quickly grow in complexity. As a security administrator, our first step is converting the security policy to security architecture.
Lets now go through and convert each security policy bullet into technical implementation.
The first one is easy. Anything from the internal network is allowed outbound to the Internet. The second security policy bullet gets tricky. We are required to set up both a web and mail server for the company. Since anyone on the Internet will be accessing both our web and mail server, we cannot trust them.