Understanding the SAFE Blueprint
Another powerful tool available from Cisco for security
administrators is SAFE, a security blueprint for enterprise networks. The SAFE
blueprint builds on the Cisco AVVID architecture by incorporating best practices
and comprehensive security functionality throughout the infrastructure.
Fundamentally, the SAFE blueprint reinforces the absolute need for security in
modern enterprise networks and details the management protocols and functions
necessary to administer the security infrastructure.
The benefits of SAFE are
-
SAFE provides a detailed blueprint to securely compete in
today's Internet and interconnected economy.
-
SAFE provides a solid foundation for migrating to a secure
and cost-effective network.
-
SAFE, by being modular in design, enables companies to stay
within their budgets.
-
SAFE provides protection at each access point to the network
using best-in-class security products and services.
SAFE is organized by network area as follows:
-
Network Campus Area
-
Network Edge Area
-
Service Provider Area
Each area is modular for consistent and rapidly deployable
security throughout the enterprise, when and where it is needed. When network
managers use SAFE to design their security, the security architecture does not
need to be redesigned each time a new service is added to the network. Each area
has several modules addressing size and site-specific security functionality.
The SAFE blueprint is depicted at a high level in Figure 1.2.
Each of these modules incorporates designs for maximum
performance, yet ensures security and integrity. SAFE modules are designed to
address several network attributes including, but not limited to, security and
threat response, secure management, availability, scalability, QoS support, and
voice support.
Additionally, Cisco has updated the SAFE blueprint with new
modules that incorporate Wireless LAN and IP Telephony security. Both address
small-, medium-, and enterprise-sized environments and include design topics
similar to those listed earlier.
Let's look as these areas in more detail.
Sections
Comments (0 posted)
Syndication
