logo-1

Layer Protection Approach

Layer 4

Perimeter Defense​​

  • FortiGate UTM  600 D​
  • Site to Site Encrypted Tunnels Using 3DES  / AES  Keys​
  • Default Deny Policy With Only Specific Traffic Being  Permitted​
  • End-to-End secure network security architecture ​
  • VPN Gateway – For Site to Site Tunnel & WFH SSL VPN’s​

Layer 3

LAN Segment​​​

  • Policy Based Traffic  Across the Internal Network​
  • No Wireless Network Architecture ​
  • Independently Audited Infrastructure ​
  • Unused / Unassigned Ports are disabled​

Layer 2

VLAN Segment​​​​

  • Physically  Separated Infrastructure ​
  • VLAN Segregation  At Firewall and Switch Port Level​
  • Monitored and Core Managed Switches​

​

Layer 1

Laptop / Desktop​​​

  • Hardening as per NIST Guidelines​
  • Bit Defender Endpoint Detection & Response (EDR)​
  • Encrypted Hard Disks ​
  • Information Security Aware User​​

Layer 0

End User ​​​​

  • Background Verification and Employee Onboarding ​
  • Non-Disclosure Agreement and Awareness of the risks  and compliance​
  • Information Security Awareness Training & Assessments​
  • Continued Updation About Phishing / Social Engineering Risks  ​​