Corporate Internet module Contains an ingress router or firewall, switch, and DMZ servers with HIDS. Design alternative is to add a VPN concentrator.
Campus module Contains switch, users, corporate servers with HIDS, and management server with HIDS. Design alternative is to add a filtering firewall in front of the management server.