Segurança de tecnologias de informação: proposta de implementação de firewall e gestão centralizada de utilizadores

Abstract

The implementation of secure corporate networks requires not only physical infrastructure but also a logical architecture that enables centralized and controlled access management. Although functional, FEUEM’s network presented several vulnerabilities, such as the lack of logical segmentation, manual and decentralized access management, and absence of clear mechanisms for role separation — especially in academic and administrative zones where critical data such as academic records and financial documents circulate. This work proposes and implements a practical solution based on two main pillars: network segmentation by zones and roles using VLANs managed by the Sophos XGS firewall, and centralized authentication and permission control using Active Directory Domain Services (AD DS) with Role-Based Access Control (RBAC). The solution was deployed in a virtual lab environment with Windows Server 2019 and Windows 10/7 clients, focusing on the creation of Group Policy Objects (GPOs), shared folders, disk quotas, and firewall rules tied to authenticated user groups. The integration between Sophos and AD DS enables the enforcement of Internet access policies and resource restrictions dynamically, with user-based visibility and auditing. The methodology involved building a fully functional lab environment that reproduces FEUEM’s scenario, aiming to reduce manual administrative tasks while improving logical network security without increasing costs. The model proved to be viable, scalable, and suitable for institutional realities, serving as a practical reference for other organizations seeking to enhance their security maturity with limited resources.