Networks

Ask something
Discussion Locked

Internal Firewall

0 helpful
6 replies

by flyfshmn 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a flat network (10.10.x.x/16). We have a group that needs to be segmented from rest of the domain. we will be using a firewall. Thoughts and suggestions are appreciated.

Thanks
Fly

6 replies

by d.walker5

Since you need a firewall sounds like your setting up a DMZ. To separate a particular workgroup, department, exchange and or Web server from the rest of your LAN, you need a router (firewall.) You could use a bridge or switch, but I can't recommmend this. I personally use Microsoft's IAS, but others perfer hardware solutions e.g. Cisco PIX firewalls, D-Link, #Com, etc. The DMZ firewall configuration you'll use will depend on your choice for a firewall. After you decide, hareware or software firewall follow the instructions provided by the supplier.

by techi.hasnain

In case you have layer three switch, yes you can very well restrict perticular group of user's from other. you got to implement VLAN on your layer three switch, and not only this you access list also on this. you can define different VLAN's for repactive group of user's and incase u hav some to use both u can do that also.

by flyfshmn

The powers that be have decided to use a Netscreen 5xp as the firewall. The group is small and has little needs. They just want limited access to the internet, only domain logon for virus management and they will use local server for all work. We just want to place them in a different network, but I have been asked to use a firewall.

This discussion is closed to new replies.