About mcronin

This is purely theoretical and does not represent a real network. You can think of this as on prem or public cloud:-   Monolithic This design utilizes 3 physical firewalls that are embedded in a data center fabric • Perimeter • B2B • DC The main focus of my question is on the DC firewall, as you can see segmentation is derived by using traditional zones. There are some people that like this design as its very simple and it has been used for years.   Virtualization This design utilizes 3 physical firewalls that are embedded in a data center fabric • Perimeter • B2B • Virtualized (vfw’s) The main focus of my question is on the Virtualized firewall, as you can see segmentation is derived by creating virtualized firewalls that represent the Environment that we are trying to segment. There are some people that like this design as it provides greater audit capabilities on environments like PCI x and y -   Can you provide a short paragraph on what your thoughts are – what do you see as the pro’s and con’s to each design. Which one is better for on prem? Which one is better for public cloud? Which one would provide better audit capabilities? Which one would provide better automation / orchestration capabilities? Which one is more agile ?     ... View more