I used to work a hosting Service Provider so I
do have some experience with the design
- create a Admin network for the Network
Operations, Engineering, Backup/restore where
the provider will be using to access multiple
customers' network
- put in a firewall for each customer. Now
for hosting provider, most of them use
Checkpoint Firewall instead of Cisco because
Checkpoint has Provider-1 where it can manage
hundred if not thousands of customer's firewalls,
- put in global rule for network Operations,
backup,restore to access customer's equipments
-For each customer's firewall, you will
interfaces connecting to Internet, Admin
and any interfaces for Citrix, Web, DB, etc...
This is a classic design that has been used
for years by Managed hosting companies.
CCIE Security
