To help reinforce the concepts that we've gone through together,
in this set of videos and in the skill,
I've got a scenario I'd like to propose for you.
Let's imagine that you and I have got into a company and the customer has
five web front-end application servers and three back-end database servers.
I've got a few of them listed here.
So here's a web server, there's a web server,
here's a database server, here's another database server.
What the customer has asked us to do is implement security with
the distributed firewall to allow clients access to the web servers for HTTPS. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the distributed firewall to allow clients access to the web servers for HTTPS.
Now behind the scenes, that'd be TCP port 443,
assuming we're using the standard default ports.
And that's the only access that we want to provide for the clients to our web
servers.
And then secondly, they want clients to get absolutely zero access to the
database servers.
So if the client wants to interact with the network,
the client would connect, for example, to a web server.
Then the application server is coming to the back end with one or more of the
database server.
But what they don't want to have is they don't want to have the clients with WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
But what they don't want to have is they don't want to have the clients with
direct access
network-wise to the database servers.
And then for that communication between the web application servers and the
database servers,
they would like to allow TCP port 5432 based on the application they're using.
So let's imagine that's the actual port that's used for the database access
between the web application server and the back end database server,
and they want to allow that traffic to go through.
So for this scenario, I'd love you to take a moment
and just to consider to implement the security there as part of the distributed WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and just to consider to implement the security there as part of the distributed
firewall rules,
what tags and/or groups would you use to implement that as well as what rules
would you implement
to control that traffic flow in the NSX environment?
So what I'd like you to do right now is take a few minutes and think about how
you would implement that security.
So including the tags and the groups and the rules.
And then once you've considered that and thought it through,
I didn't like to have you join me for the next video as we'll compare notes.
And also realize there's not just one exact way to implement this type of
security.
There's a few different options.
So once again, we'll compare notes in the next video when you've had time to WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So once again, we'll compare notes in the next video when you've had time to
consider this on your own.
So when you're ready, I'll see you in the next video.
[no audio]