Security

Ask something
Discussion Locked

Backups - DMZ

0 helpful
3 replies

by nikki99

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anyone have any standard procedure documents for backing up boxes on the DMZ? There is a theory that the backup server that backs up DMZ boxes should be placed on the DMZ. I am looking for documents that prove or disprove that theory.

3 replies

by joseph moore

I don't have a document; all I can tell you is what my companys policy is. This policy is in use by our 12-country-spanning WAN.
The IP addresses and port(s) used by our backup software are all allowed through the firewall screening the DMZ from the individual LANs. The firewall allows access FROM the DMZ machines to the IP address of the LAN backup server ONLY.
Offices use either BackupExec or Tivoli Storage Manager.
Backups are performed normally, as per the setup of the backup software.
For example, TSM clients communicate to the TSM server on TCP port 1500. This port is allowed in the firewalls screening the DMZ, originating from all DMZ machines, but the destination IP allowed is ONLY the TSM server on the LAN.

We do not run backup servers on the DMZ. We just have our firewall rules set up correctly!

hope this helps

This discussion is closed to new replies.