1

Simple enough really. Can I create a IPSEC rule/filter between two publically available servers (they are actually on the same network) while still allow external traffic to the same resources.

I'll try to give as much info as possible:

Web Server <--> Database Server, of which both have Public IPs.

I want to secure database traffic/connections from the web server but yet still allow external direct connections, from my office, to the database server, if needed.

The thing is, and the reason I ask all this, is that the two servers are Virtuzzo servers in a data centre somewhere, maybe even on the both hardware node. I'd like for the "between" server traffic to be secure at least.

I found many step by step guides on how to setup the filters, I just want to confirm my request.

Improve this question

1 Answer 1

Reset to default
1

Yes you can do this and I highly recommend doing so, if you want direct connections to the DB server from a non intranet location. The external allow rule should only allow the traffic from the ports you want (eg 80 443)

Improve this answer
2
  • Right, gotcha. So it is possible. I asked because most of the resources on how to create the IPsec tunnel between servers blocked all external connections. I don't suppose you know of any resources that help me with my specific issue?
    – Anthony
    Apr 5, 2011 at 12:05
  • the only thing that comes to mind would be the domain and server isolation accelerator technet.microsoft.com/en-us/library/cc163159.aspx
    – Jim B
    Apr 5, 2011 at 14:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .