The city, the Clerk of Courts, the Public Defender, the public library system, the Sheriff’s Office and the municipal utility — each carrying its own virtual system, routing domain, DMZ and security policy on shared physical infrastructure and shared, diversely routed internet egress.
Twenty-six revisions of the design document over its life.
Palo Alto Networks asked more than once to publish it as a vendor white paper. The answer was no every time: the architecture is public-safety facing, and a published diagram of how a sheriff’s office and a court system are isolated from one another is a gift to somebody.
Outcome
Hard isolation between tenants that each retained the autonomy their independently elected leadership required.