Security Services Domain Model / Worked Examples / Firewall & Network Security
Worked Example: Firewall & Network Security
This example turns a detailed firewall architecture into a navigable Security Services Domain Model. It connects regulatory, privacy, resilience and trust drivers to logging and monitoring, encrypted-traffic inspection, segmentation and edge access; follows the design through logical inspection and decision workflows; and traces those workflows into gateway, management and event systems delivered by Check Point and Cisco Meraki products.
Interactive Firewall & Network Security Example
A relationship-first summary of the original large-format architecture example.
Choose a layer or select any concept to reveal its definition and relationships. The downloadable A0 model below contains the full service, mechanism, system and product detail.
Same Model, This Scenario
The interactive view condenses the detailed source architecture into the same eighteen concepts used by the other worked examples.
| Generic Concept | Instantiated As |
|---|---|
| Business Driver | Protect Digital Operations |
| Business Attribute Profile | Compliant · Resilient · Observable · Trusted |
| Domain | Firewall & Network Security |
| Sub-Domain | Monitoring · Inspection · Segmentation |
| Compliance Obligation | Legal, Regulatory & Privacy Duties |
| Threat | Hidden Threats & Lateral Movement |
| Risk | Breach, Data Loss & Non-compliance |
| Business Outcome | Controlled, Visible Network Traffic |
| Measures | Coverage · detections · exceptions · retention |
| Domain Policy | Inspection, Zoning & Monitoring Policies |
| Control Objective | Inspect, Segment, Record & Enforce |
| Security Service | Secure Network Gateway Service |
| Logical Mechanism | Traffic Inspection & Decision Workflow |
| Logical Sub-Mechanism | Classify · decrypt · scan · enforce · log |
| Physical System | Gateway, Management & Event Estate |
| Physical Mechanism | Inspection, Decision & Logging Nodes |
| Physical Sub-Mechanism | Rule engines · classifiers · sandbox · log server |
| Product | Check Point & Cisco Meraki Portfolio |
Download The Detailed Example
The original A0 PDF retains the detailed policies, services, logical and physical mechanisms, systems, products, licences and relationships used to build the interactive summary.