IT Employment

Ask something
Discussion Locked

Planning a DMZ

0 helpful
2 replies

by troytown

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Can a server with 2 network cards (one restricted to TCP/IP traffic from the outside and the other with an internal 10.0.X.X address) be appropriate for a DMZ situation?

Internal users need to map a drive to this server.

Is this secure?

Thanks!

2 replies

by ghstinshll

This is a DMZ by description, but offers not enough true security... You'll need routers for this, as they are the only true devices that can offer a real layer 3 security option.

If the server you're talking about has NAT running, that will help, but it won't truly be what's right. If cost if a major issue, then keep your solution. If it's not, then spend on a PIX firewall, (relatively affordable) and a couple of routers.

by troytown

This server is behind a PIX firewall and a router.
Only ports 554, 7070, 1755, 80 & 8080 are allowed in to this IP.

Is there more to be done to secure the server itself?

Thanks!

This discussion is closed to new replies.