Infrastructure Security Architecture for Effective Security Monitoring

Many organizations struggle to architect and implement adequate network infrastructures tooptimize network security monitoring. This challenge often leads to data loss with regards tomonitored traffic and security events, increased cost in new hardware and technology needed toaddress monitoring gaps, and additional Information Security personnel to keep up with theoverwhelming number of security alerts. Organizations spend a lot of time, effort, and moneydeploying the latest and greatest tools without ever addressing the fundamental problem ofadequate network security design.This paper provides a best practice approach to designing and building scalable and repeatableinfrastructure security architectures to optimize network security monitoring. It will expand onfour network security domains including network segmentation, intrusion detection andprevention, security event logging, and packet capturing. The goal is a visual representation of aninfrastructure security architecture that will allow stakeholders to understand how to architecttheir networks to address monitoring gaps and protect their organizations.