Diagram · Domain 3
Place the security controls
Domain 3: Security ArchitectureDiagram
Riverbend Labs runs one public web app in a DMZ and staff laptops on an internal LAN. Inbound clients hit the edge first; the web tier sits ahead of origin servers; east-west traffic between DMZ and LAN needs inspection; hosts that users carry need endpoint visibility. Place each control where it does the most good. Some candidate controls may not be needed on this diagram.