Network Security Zoning - Design Considerations for Placement of Services within Zones (ITSG-38)

This guideline is intended to assist network architects and security practitioners with the appropriate placement of services (for example, domain name service, email service, and web proxy service) into network security zones.