<p>Institutions must improve their IT infrastructure to accommodate their rising activities and prevent service disruptions caused by the growing threat of malware and cyberattacks. The proposed approach focuses on improving communication institutions’ network infrastructure by creating a network topology that creates an on-premises configuration with two sites and three different networks. This concept takes a new approach to network infrastructure upgrades by adopting a dual-site, on-premises design with three specialized networks: a LAN for client devices, a server data center, and a DMZ for hosting public-facing services like websites and DNS. This architecture is built around a layered security framework based on FortiGate firewalls is key to this design, as it not only protects critical data and resources from unwanted access but also incorporates advanced trap and IP security technologies for optimal protection. Furthermore, the proposed infrastructure is designed to be scalable, allowing for future organizational expansion and technological advancement. This solution creates a resilient and future-proof basis for important business processes by combining robust on-premises architecture with cutting-edge security measures, resulting in uninterrupted service delivery and increased operational efficiency.</p>