Our intentions here are to provide a number of layers that we, as an externally located attacker, may have to penetrate to get to the target. This is the reality of external testing; many of the targets will have multiple protections in place between the attacker and the target. Fortunately, as these machines are required to allow access to services from the outside, they will also provide access to us as we conduct our testing.

We will build our network architecture to provide the layers that are shown in the following diagram:

As we review the architecture, we see that we have added a web server and a Bastion Host machine to our original design and a router is connected to the VMnet8 and VMnet 2 switches. As discussed in Chapter 4, Identifying Range Architecture, this is the power of our planned architecture; we just plug in machines wherever we want to test them. In the architecture shown in the previous diagram, we have the router device that we will...