1

The Website [www.domain.com] is protected by Cisco firewalls in DMZ Zone and the only communication available is TLS.

2

The Website [www.blog.domain.com] is using WordPress and is protected by a Cisco firewall in a DMZ Zone. The only communication available is TLS.

3

The Admin page for WordPress [wpadmin.blog.domain.com] is accessible internally through an HTTPS Link.

4

The web server of [www.domain.com] is using Microsoft IIS and Windows Server 2016 with the latest security patches. (See the Nessus report on the intranet [rs66988_nessus.pdf].)

5

The web server of [www.blog.domain.com] is using Apache and Ubuntu Server 2016 with the latest security patches. (See the Nessus report on the intranet [rs56389_nessus.pdf].)

6

The database is using MySQL and is stored on the same server as the web application. (See the Nessus report on the intranet [rs56389_nessus.pdf].)

7

Customers will access the blog through a hyperlink located on the menu of the website [www.domain.com], which will redirect them to [www.blog.domain.com].