IT‑IS Networking
Documents › Design document

Enterprise Multi-Tenant Firewall Architecture

Twenty-six revisions over its life. Palo Alto Networks asked repeatedly to publish it as a vendor white paper; the answer was no every time.

Six independently governed agencies, each carrying its own virtual system, routing domain, DMZ and security policy on shared physical infrastructure and shared, diversely routed internet egress.

Deliberately unpublished. The architecture is public-safety facing, and a published diagram of how a sheriff’s office and a court system are isolated from one another is a gift to somebody. I would rather be the architect a vendor wants to write about than the one who let them.