Белая книга для Cisco Cisco ASA 5585-X Adaptive Security Appliance
Cisco and Public Sector Cyberdefense
19
Securing the WAN and Remote Agency Offices
The WAN in a federal installation will serve multiple purposes:
• To prove headquarters access to smaller remote agency offices
• To provide secure incoming access via the Internet or dedicated lines to associated business partners and contractors
• Connecting geographically remote data centers across the WAN
• To act as one of the prime mechanisms for citizen access to information and services
7
All of these are necessary functions, but providing such openness also requires security controls in place to assure that it is not abused. There are
several different areas that need to be examined here, including the headquarters aggregation router/switch, the architecture of the remote agency
office, and the Internet portal.
several different areas that need to be examined here, including the headquarters aggregation router/switch, the architecture of the remote agency
office, and the Internet portal.
7
Although one or more of
these functions can be
combined within a single
switch or router, the Trusted
Internet Connection (TIC)
initiative, part of the Cyber
Defense project, will likely
separate out the Internet
process as a discrete design
element.
these functions can be
combined within a single
switch or router, the Trusted
Internet Connection (TIC)
initiative, part of the Cyber
Defense project, will likely
separate out the Internet
process as a discrete design
element.
Continue
Previous