Trend Micro viruswall enforcer 1500i, Руководство по установке и развертыванию

Страница: 48 / 78

Deploying Network VirusWall Enforcer
3-9
Key Segments and Critical Assets
Key network segments need to be protected from network-based threats. This may
include a group of endpoint computers or network resources critical to your
organization, such as email, web, or application servers.
F
IGURE
3-5. Key network segments scenario
The diagram above illustrates a segment of an internal network containing email and
web servers, including endpoints. An internal switch or hub is connected to a regular
port (see
Key Concepts on page 1-3 for information about different types of ports),
creating a segment where all packets going in and out of the segment can be scanned.
Installing the device in this position adds the benefits of virus scanning and segment
isolation in the event of a virus outbreak.
Critical hosts
L2 switch
L3 switch