Lab: Firewall Rule Analysis and Network Topology Design
🔬 Lab Practical — CSF & NS Practical 4 | Est. time: 3 hrs
🎯 Objective
Analyse firewall rules for misconfigurations and design a secure network topology.
📝 Procedure
- Review provided firewall rule set
- Identify 3 misconfigurations with justification
- Rewrite corrected rules
- Design network topology with DMZ using draw.io
- Justify IDS placement in the topology
💭 Observation Questions
- What is the purpose of a DMZ? Why should a web server not sit on the internal LAN?
- A rule says “Allow TCP ANY ANY port 443.” Why is this dangerous even though 443 is HTTPS?