“Bar Samcha” University · security architecture
Live Network Walkthrough
Traffic Flow
Threat Flow · Today
Threat Flow · Target
WAF
AI
AI
Cloud – EU / US
External
Perimeter
Israel HQ – DC1
DC2 – DR Site
DC3 – Backup Vault
MSSP SOC
DMZ
Remote Access
Guest / BYOD / Visitors
User VLANs
VLAN 10 – Administration Staff
VLAN 15 – IT Admin (PAW)
VLAN 20 – Research Workstations
VLAN 40 – Students
Access Layer – 802.1X / NAC
VLAN 250 – Logging & Mgmt
VLAN 100 – Admin Servers
VLAN 110 – Research Computing
VLAN 120 – Research Data
VLAN 130 – Identity & Access
VLAN 135 – Core IT Services
VLAN 140 – Backup
VLAN 145 – File Transfer & CDR
EDR on all endpoints and servers · DLP on endpoints, servers, e-mail, cloud
Internet
Partners IL / USA
Remote Researchers
eduroam (IUCC)
NGFW (HA)
E-mail Security
(M365 · CDR)
AI Gateway + DLP
WAF
Academic Portals
ZTNA Gateway
per-app access
MFA enforced via IdP
Guest Wi-Fi
eduroam visitors
(Internet only)
Core Switches
(HA · L2 only)
Data Center FW
(HA)
Admin Staff PCs
IT Admin PCs (PAW)
Research PCs
Student Devices (eduroam)
Access Switches
Wi-Fi Controller
Log Collection Server
EDR / DLP Console
Vulnerability Scanner
Patch Management
ERP / Finance
File Server
Research Apps
HPC Clusters
On-prem AI
Research Data
Scientific DBs
NAS
IdP + MFA
PAM
NAC
Domain Controllers
DNS
NTP
KMS / HSM
Backup Server
CDR Engine
USB Kiosk
Secure File Transfer
DR Replica
Immutable Backup
SOC 24/7
Cloud FW
Cloud Research Servers
IAM via our IdP + MFA
Encrypted Storage
keys in our KMS
CSPM
config monitoring
WAF
AI
AI
External
Perimeter
Campus LAN – Israel HQ
VLAN 10 – Admin
VLAN 20 – Research
VLAN 30 – Guest / BYOD
VLAN 40 – Servers
Internet
Partner Institutions
Remote Researchers
Cloud Storage EU / US
Edge Firewall / VPN
Core Switch
Staff PCs
ERP / Finance
Grant Docs
E-mail Server
Academic Portals
Research PCs
NAS
Research Data
Scientific DBs
HPC Clusters
Research Apps
Guest Wi-Fi
Active Directory
Backup Server
Video Conferencing
NGFW
First match wins
#
Source
Destination
Service / check
Action
ALLOW
Pause
Replay
Next scenario
Speed
0.6×
1×
1.5×
2.5×
Play all in a row
T2
Run the same threat in the target design →