Build and Prove a DMZ: Firewall Policy Design

<p>Tarang Travels, a fictional Kochi travel agency, runs its booking website on the same network as its database and staff PCs. Before its payment provider's review, the website must move into a DMZ.</p><p>In four lessons you learn network segmentation and the DMZ pattern, how stateful firewalls evaluate rules (interfaces, first match, default deny), how port forwarding publishes a service, how to write least-privilege rules with aliases, and how to prove a policy with a policy-lookup tool before anything goes live. You draw the design in draw.io and write the rule rationale an assessor will read.</p><p>You work in Bartman's in-browser Firewall Lab, modelled on pfSense's rule editor; hidden policy tests generated for your addresses check it. No traffic is sent anywhere. Part of the Bartman Cybersecurity track (Professional Certificate in Cybersecurity, LSBF).</p>

Tools: Firewalls, Network segmentation, DMZ, NAT, pfSense concepts, draw.io