Would you consider the following to be "basic hardening items" for network equipment and servers?
- VLANs
- Access Control (such as NTFS permissions)
- Patch Management System
- Host Firewall
- Anti-Virus
What is the minimal protection needed to segment my internal network from the DMZ and the outside? Is having a WAF, assuming you're dealing with web applications, and default denies, with tightly confined rules, on the firewalls sufficient?