WEBVTT 1 00:00.000 --> 00:03.700 To help reinforce the concepts that we've gone through together, 2 00:03.700 --> 00:05.400 in this set of videos and in the skill, 3 00:05.400 --> 00:08.500 I've got a scenario I'd like to propose for you. 4 00:08.500 --> 00:12.900 Let's imagine that you and I have got into a company and the customer has 5 00:12.900 --> 00:18.400 five web front-end application servers and three back-end database servers. 6 00:18.400 --> 00:20.100 I've got a few of them listed here. 7 00:20.100 --> 00:22.400 So here's a web server, there's a web server, 8 00:22.400 --> 00:24.500 here's a database server, here's another database server. 9 00:24.500 --> 00:27.800 What the customer has asked us to do is implement security with 10 00:27.800 --> 00:32.800 the distributed firewall to allow clients access to the web servers for HTTPS. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 10 00:27.800 --> 00:32.800 the distributed firewall to allow clients access to the web servers for HTTPS. 11 00:32.800 --> 00:36.800 Now behind the scenes, that'd be TCP port 443, 12 00:36.800 --> 00:38.800 assuming we're using the standard default ports. 13 00:38.800 --> 00:43.190 And that's the only access that we want to provide for the clients to our web 14 00:43.190 --> 00:43.800 servers. 15 00:43.800 --> 00:47.790 And then secondly, they want clients to get absolutely zero access to the 16 00:47.790 --> 00:48.800 database servers. 17 00:48.800 --> 00:50.800 So if the client wants to interact with the network, 18 00:50.800 --> 00:53.800 the client would connect, for example, to a web server. 19 00:53.800 --> 00:56.800 Then the application server is coming to the back end with one or more of the 20 00:56.800 --> 00:56.800 database server. 21 00:56.800 --> 01:00.330 But what they don't want to have is they don't want to have the clients with WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 21 00:56.800 --> 01:00.330 But what they don't want to have is they don't want to have the clients with 22 01:00.330 --> 01:00.800 direct access 23 01:00.800 --> 01:02.800 network-wise to the database servers. 24 01:02.800 --> 01:06.960 And then for that communication between the web application servers and the 25 01:06.960 --> 01:07.800 database servers, 26 01:07.800 --> 01:13.800 they would like to allow TCP port 5432 based on the application they're using. 27 01:13.800 --> 01:17.800 So let's imagine that's the actual port that's used for the database access 28 01:17.800 --> 01:20.800 between the web application server and the back end database server, 29 01:20.800 --> 01:22.800 and they want to allow that traffic to go through. 30 01:22.800 --> 01:25.800 So for this scenario, I'd love you to take a moment 31 01:25.800 --> 01:30.140 and just to consider to implement the security there as part of the distributed WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 31 01:25.800 --> 01:30.140 and just to consider to implement the security there as part of the distributed 32 01:30.140 --> 01:30.800 firewall rules, 33 01:30.800 --> 01:35.180 what tags and/or groups would you use to implement that as well as what rules 34 01:35.180 --> 01:35.800 would you implement 35 01:35.800 --> 01:38.800 to control that traffic flow in the NSX environment? 36 01:38.800 --> 01:42.800 So what I'd like you to do right now is take a few minutes and think about how 37 01:42.800 --> 01:43.800 you would implement that security. 38 01:43.800 --> 01:46.800 So including the tags and the groups and the rules. 39 01:46.800 --> 01:49.800 And then once you've considered that and thought it through, 40 01:49.800 --> 01:53.800 I didn't like to have you join me for the next video as we'll compare notes. 41 01:53.800 --> 01:58.100 And also realize there's not just one exact way to implement this type of 42 01:58.100 --> 01:58.800 security. 43 01:58.800 --> 01:59.800 There's a few different options. 44 01:59.800 --> 02:03.870 So once again, we'll compare notes in the next video when you've had time to WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 44 01:59.800 --> 02:03.870 So once again, we'll compare notes in the next video when you've had time to 45 02:03.870 --> 02:04.800 consider this on your own. 46 02:04.800 --> 02:07.800 So when you're ready, I'll see you in the next video. 47 02:07.800 --> 02:29.880 [no audio]