Zero Trust Security

Chapter 6 Network Monitoring

You are presenting to the C-suite how we redesigned the network and split it into three zones: DMZ, Production, and Corporate. Just as you are about to change slide, presenting the next project for Zero trust. The CFO asks “Does that mean we are now “Zero trust”?”, you click to the next slide and tell to them “Zero trust is a mindset of continuous improvement. And there are still many things that need to be done.” You continue the presentation and a new slide pops up with the header “You can’t protect what you can’t see” a slide on how monitoring is one cornerstone of Zero Trust. On how you would like to implement network monitoring which requires new hardware, software and people to operate the monitoring tools, looking for unusual activity. The board agrees, and you set out to implement network monitoring.

We have now segmented the network into three different zones: DMZ, Production and Corporate. This segmentation helps limit the possibility of threat actors moving laterally between assets. The problem we are currently facing is that we do not know what is going on within our network. You might remember from Chapter 2 that monitoring is one of the key design principles of Zero Trust Architecture. It is for that reason that we will, in this chapter, be exploring the importance of network monitoring and the tools and techniques used to set up network monitoring. When it comes to implementing network monitoring in our simulated environment, the ...