You are designing a Demilitarized zone for a large corporation. Using design best practice, and the information that you have learned so far, propose a design that will provide the following capabilities.

• Secure WEB server hosting environment
• Provide Internet browsing capability for internal users
• Internal users access to the WEB servers for maintenance.
• VPN access to internal system from the internet.
• Identify the use and location of Firewalls where necessary
• Identify the use and location of IPS/IDS where necessary.

Provide a diagram showing, Internet, WAN and all security components with the flow of traffic for each, Explain the functions of each component, why you selected them, and the why you selected that location in the data flow.