Network Security Principles and Practices

Architecture Overview

Design Fundamentals

SAFE emulates as closely as possible the functional requirements of today's enterprise networks. Implementation decisions varied depending on the network functionality required. However, the following design objectives, listed in order of priority, guided the decision-making process.

• Security and attack mitigation based on policy

• Security implementation throughout the infrastructure (not just on specialized security devices)

• Secure management and reporting

• Authentication and authorization of users and administrators to critical network resources

• Intrusion detection for critical resources and subnets

• Support for emerging networked applications

First and foremost, SAFE is a security architecture. It must prevent ...