A vendor is requesting to allow persistent tcp (not port 80) connection between a server in the DMZ and the internal network. I don't have much experience with this setting. Can anyone shed some light on disadvantages of allowing persistent connection? Guidance is much apprciated.
I would ask this question to the vendor to see why they want it, and have the explain it to make sure you know what they are talking about. I am not quite sure, but it sounds like they mean enabling the optional keep alive TCP feature. Keep-Alive can serve a couple of purposes that I can think of right now:
This is a debated topic, as mentioned in TCP/IP Illustrated Volume 1, many feel keep alive should be handled by the application layer, not the transport layer.