Intrusion prevention architecture placed inline at the enterprise core rather than out of band, and high-availability security platform design that fails open rather than closed.
Detection you cannot see is not a control, so monitoring and probe segments were part of the design rather than something retrofitted once an incident demanded them.
Applied in
- Cecil Disaster Recovery Data CentreFacility and network design for the recovery site — power, cooling and carrier entry as well as what ran inside.
- Enterprise Fortinet IPS DeploymentVDOM-separated inline intrusion prevention at the enterprise core, with separate policy per internet path.