Objective: An effective approach or strategy for the security of a network connected to the internet is network segmentation. You must construct, extend, or improve the security of a network utilizing network segmentation for this assignment.

Submission:Show your design and all the details required for all the tasks in a diagram.

Diagram Layout

wwwInternetRouterFirewall 1--Network Segment A (DMZ)

Network Segment A (DMZ)

The Application Server, File Server, Database Server, DNS Server, Email Server, Time Server (Clock), CMS Server, Certificate Server, Proxy Server, and Jump Box should all be placed in the DMZ. The reason for this is that these servers need to be accessible from the internet, but they should not be part of the main network. The Honeypot Server can also be placed in the DMZ.

---Firewall 2-- Network Segment B(Main Network)

Network Segment B (Main Network)

User 1, User 2, Domain Controller, and Systems Administrator should all be placed in the main network. The reason for this is that they should not be accessible from the internet.

The Web Server, E-Commerce Server, and Archive Storage can be placed in either the DMZ or the main network.