internet
internet Operators
[Link]/24
Internet line1 Internet line2 DMZ
[Link]/24 [Link]/24 [Link]/24
Wan connection10.1.23.1/24
[Link]/24
Wan router HQ Firewall
Branch
Firewall
FGT
[Link]/24
Back End
Network Printer Users
[Link]/24
[Link]/24 [Link]/24
Requirements:
Initial configuration
Operators access all subnets without restrictions
Users can access back end servers (ip: [Link]) by LDAP Authentication ports and DNS Only
Users can access network printers by printing ports only
Back end servers can access windows updates only
Users from branch can access back end servers (ip: [Link]) by LDAP Authentication ports and DNS Only
Application server IP [Link] is published as below:
o External ip [Link]
o Internal ip [Link]
o port forwarding 80>>8090
operators can access internet without any restriction
users are not allowed to access social media sites and news.
Users are not allowed to download any executable files.