In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

0
votes
1answer
96 views

New router messed up server 2003 setup

Hey, We were sent a new 2wire router today configured it as best we can to match the old bt voyager. We've also got X static IP's. We've manage to get our webserver on one of the new IP's public ...
2
votes
1answer
513 views

Virtual firewall in existing network DMZ?

A network configuration question from a relative newbie... We have an existing LAN setup, with a hardware firewall (D-Link DIR-655) and a Microsoft Small Business Server (which does the DHCP). We ...
1
vote
1answer
486 views

ISA Server: How to troubleshoot DHCP problem?

I've added a DHCP Server to my ISA Server. The purpose of the DHCP server is to provide addresses to a DMZ (on its own interface) for misc computers that need internet access but don't need to be part ...
1
vote
1answer
588 views

DMZ - LAN and Webserver

i know that DMZ should contain servers that acts as a middle point between the trusted area like LAN and the other semi or non trusted area like internet or another DMZ. based on this declaration our ...
1
vote
2answers
4k views

Cisco VPN Client dropping connection

Using Windows XP and Cisco VPN client version 5.0.4.xxx to connect to a remote customer site. We are able to establish the connection and start an RDP session, but within 1-2 minutes the connection ...
0
votes
2answers
206 views

Can I make VM's accessible over VPN, but not LAN?

In the near future, my firm will begin hosting Terminal Services systems for a few business customers. The Terminal Services Servers will be VM's on one of two large VM hosts. To provide secure ...
2
votes
4answers
7k views

If you need to open ports from DMZ to LAN, at what point is the separation no longer worth it?

If you have a DMZ with one or more servers/services (maybe FTP, HTTP en SMTP). And you have a LAN with typical serversservices (like file sharing, Active Directory, database server). Depending on ...
0
votes
1answer
669 views

IIS FTP - Users Last Logon

How would you determine the last FTP logon time/date for a bunch of local user accounts on a DMZ (standalone/workgroup) server running IIS FTP? I know I could use a log aggregator and sift through it ...
0
votes
1answer
880 views

How can I set up a DMZ for Wireless Access?

My company uses Microsoft Windows Server 2003. Our internet connection goes through a proxy server across a WLAN to the main office. I want to set up a wireless LAN in my local network whereby ...
0
votes
1answer
888 views

Juniper SSG5 Firewall

I have a SSG5 firewall with some route based VPN. I have a LAN, a DMZ, an another net and WAN. How should I do to make DMZ use VPN and not LAN? I think it's a routing problem. But Source routing doesn'...
6
votes
2answers
2k views

Virtual host on LAN - VMs on DMZ, separate NICs - is this a bad idea?

Just kicking this idea around, and wanted to see if you'll be so kind as to point out the problems I don't see. If I set up this new HyperV host as a normal domain member, the benefits are obvious. ...
0
votes
2answers
343 views

Slow Routing Problem

I've got the following network: ADSL(10.) --- Router (10.0.0.50,172.0.0.1) --- "HTTPServer (172.0.0.10)" | | --- "HTTPS Server" (10.0.0.3) --- Another computer (10.0.0.5) I ...
2
votes
3answers
284 views

Webservers - Attached to AD or not?

Do you prefer to run their IIS webservers inside a DMZ that is part of the greater organisation's AD or do you prefer to sacrifice ease of management and user control over (possibly perceived) ...
3
votes
3answers
4k views

Active Directory Domain Controllers in a DMZ

I am looking to deploy 2 additional Windows Server 2003 domain controllers into a separate confidential DMZ alongside 6 DCs that are installed in the regular network, making a total of 8 DCs. The 2 ...
3
votes
7answers
3k views

Should databases containing customer information go in a DMZ?

We're deploying a simple newsletter webapp on a stand-alone LAMP platform in the company DMZ. There is some discussion as to whether the MySQL server should be removed from the DMZ and put in the ...
5
votes
3answers
6k views

Active Directory in a DMZ

What is the best way to manage user accounts for Windows servers in a DMZ? We are expanding our web presence and adding several IIS servers to our DMZ. I would prefer not to manage a bunch of local ...
3
votes
1answer
899 views

Will you allow NetBIOS into your DMZ?

Is it secure for a firewall to allow NetBIOS connections from the internal network to the DMZ? If not secure, what are the risks? If secure, what is the FUD about and what are the counterarguments?
1
vote
2answers
453 views

Considerations for Security appliance/software in DMZ

What are the significant considerations when designing and setting up a dmz for a relatively small office (15-20users) with a limited budget? The network traffic across the dmz will be inbound smtp (...