CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide

Chapter 17. Network Security

Securing network access and data center devices has never been a simple task. However, it’s always challenging and hard to define user access privileges and apply appropriate network policies, network controls, and so on. The new network security module is Zero Trust (ZT); it is a guiding concept that implies the network is always assumed to be hostile and both external and internal threats exist at all times. Zero Trust mandates a “never trust, always verify, enforce least privilege” approach, granting least privilege access based on a dynamic evaluation of the trustworthiness of users and their devices and of any transaction risk before they are allowed to connect to network resources.

This chapter covers the following ...