
218 Enterprise Business Portals with IBM Tivoli Access Manager
Figure 9-1 YRI Ltd’s basic IT architecture
The IT architecture in a single region is visually represented in Figure 9-1. As you
can see, the architecture relies on the following security measures:
Access from DMZ to core network is completely disabled.
Access between intranet and core network is controlled by a firewall.
RAS is not directly in the core network, but in the intranet with an enabled mail
connection to the Lotus Domino server.
As discussed earlier, this constitutes a relatively secure network, but it also limits
the availability of key services such as e-mail and insurance ...