The perimeter firewall
The filter between CERN and the internet: closed by default, with openings requested per registered device or LanDB set. The soc watches what passes through it, and the cis-v8-audit pushed for both finer denial-of-service protection and a more capable replacement able to inspect far higher traffic volumes.
Topology
- Part of: networks
- Uses: landb — firewall openings are tied to registered network objects.
- Cites: cern-firewall — the service description.
- Cites: security-audited-for-the-better — the planned upgrades.