Network security zoning : design considerations for placement of services within zones. : D96-8/38-2009E-PDF

"This guideline is intended to assist network architects and security practitioners with the appropriate placement of services (for example, domain name service, email service, and web proxy service) into network security zones. A service is a logical construct that represent a set of functional requirements in an information technology architecture. These functional requirements can be simple such as providing resolution of domain names, or complex such as processing and transmitting email. Services can be physically implemented in many ways, for example, a single process on server, multiple processes on a virtual machine, or distributed processes among pool of servers. Concepts used in this document are based on the Baseline Security Requirements for Network Security Zones in the Government of Canada (ITSG-22), which describes the concepts of network security zones and specifies baseline security requirements for zone"--Executive summary, page iii.

Lien permanent pour cette publication :
publications.gc.ca/pub?id=9.869718&sl=1

Renseignements sur la publication
Ministère/Organisme Communications Security Establishment (Canada)
Titre Network security zoning : design considerations for placement of services within zones.
Titre de la série Information technology security guidline ; ITSG-38
Type de publication Monographie
Langue [Anglais]
Autres langues publiées [Français]
Format Électronique
Document électronique
Note(s) Issued also in French under title: Établissement des zones de sécurité dans un réseau : considérations de conception relatives au positionnement des services dans les zones.
Cover title.
"Unclassified."
"May 2009."
Issued also in HTML format.
Includes bibliographical references.
Information sur la publication [Ottawa] : Communications Security Establishment Canada = Centre de la sécurité des telecommunications Canada, 2009.
©2009
Description 1 online resource (38 pages) : colour illustrations.
Numéro de catalogue
  • D96-8/38-2009E-PDF
Descripteurs Federal government
Computer security
Demander des formats alternatifs
Pour demander une publication dans un format alternatif, remplissez le formulaire électronique des publications du gouvernement du Canada. Utilisez le champ du formulaire «question ou commentaire» pour spécifier la publication demandée.
Date de modification :