Secure Zone scenario

Available in Classic

You can use the security service through the Secure Zone of the NAVER Cloud Platform to securely manage important information resources. While you can check the usage method in detail at Start Secure Zone and Using Secure Zone, it is recommended to first look at the overall scenario of using the Secure Zone. Reading the guide after learning the usage scenario will allow you to use the Secure Zone more smoothly. The overall sequence of using the Secure Zone and the description of each sequence are as follows:

1. Set usage permissions
2. Request subscription to the Secure Zone
3. Create server in the Secure Zone
4. Create and set up SSL VPN
5. Create firewall
6. Create policy
7. Set up DB security solution
8. Check Secure Zone usage status

1. Set usage permissions

You can set usage permissions for the Secure Zone. Secure Zone usage permissions are defined by mapping "roles" to "sub accounts" issued by NAVER Cloud Platform's sub account. Thus, you need to first create sub accounts other than your main account through Sub Account.

You can use sub accounts provided by the sub account to configure admin permissions and user permissions for the Secure Zone. You can refer to the following guides:

• Manage permissions in the Secure Zone
• Sub account guide

2. Request subscription to the Secure Zone

To create a server in the Secure Zone, you first need to request a subscription to the Secure Zone. You can refer to the following guides:

• Start Secure Zone

3. Create server in the Secure Zone

Create a server in the Secure Zone. You can refer to the following guides:

• Create servers

4. Create and set up SSL VPN

To access the Secure Zone server, create an SSL VPN and set up an ACG for the SSL VPN IP pool. After setting up, register the users who will access the instance through the SSL VPN. The registered users can log in to the SSL VPN using the ID and password set during registration. You can refer to the following guides:

• SSL VPN Guide

5. Create firewall

Create a firewall to control access to the Secure Zone. To communicate with an external legacy, you need to create an advanced firewall. You can refer to the following guides:

• Create firewall

6. Create policy

Create a policy to allow server access through SSL VPN. To communicate with external and internal instances, you need to create a policy on the advanced firewall. If necessary, create an address group and add instances to the group when creating a policy. You can refer to the following guides:

• Create policy
• Create address group

7. Set up DB security solution

If necessary, set up DB access control and encryption solutions according to the purpose for using the Secure Zone. The solution is not provided by NAVER Cloud Platform, but you can use your existing solution or a new solution from an external company.

8. Check Secure Zone usage status

Check the traffic usage and collected logs. You can refer to the following guides:

• Search traffic usage
• Search log