| Author |
DMZ and Firewall on Ethernet?
|
|
| Pitowski 2003-06-25, 1:24 am |
| Hi! Got question regarding setting DMZ with the firewall. Couple questions
about it, was either All in One or Sybex. On one picture there was DMZ
located between firewall and LAN and it was correct. Then the other question
suggest moving DMZ with web server and mail router outside firewall, between
Internet and firewall.
Anybody can tell me, which way is better and why?
TIA
| |
|
| When you have a business that has a website it is preferable from a security
aspect to have your web server located in the DMZ (kind of what they were
designed for actually). This allows your external customers to access your
site without having access to your Intranet and by using a secure chanel
allows your staff to also access the site from inside the Intranet. Having
a mail server there also allows the admin to easily filter out known spam
before it hits your Intranet.
--
RussS
MCP W2K Pro & Server, A+, Net+
http://www.techexams.net/
| |
| aznluvsmc 2003-06-26, 2:37 pm |
| There are books that state the DMZ should also be protected by a firewall as an extra precaution. I think this is called a back-to-back firewall. Bastion host where the DMZ sits between the Internet and the corporate firewall is the most utilized configuration (I think). |
|
|
|