In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...
2
votes
1answer
364 views
How to Deploy an ASP.NET Web API- and Browser-based Application to a Production Environment [closed]
(Please forgive if this is posted in an incorrect forum. We didn’t know exactly where to post it.)
We have an ASP.NET Web API single page application - a browser-based app running in IIS to serve up ...
5
votes
3answers
4k views
Active Directory in a DMZ
What is the best way to manage user accounts for Windows servers in a DMZ? We are expanding our web presence and adding several IIS servers to our DMZ. I would prefer not to manage a bunch of local ...
4
votes
4answers
4k views
Should a webserver in the DMZ be allowed to access MSSQL in the LAN?
This should be a very basic question and I tried to research it and couldn't find a solid answer.
Say you have a web server in the DMZ and a MSSQL server in the LAN. IMO, and what I've always ...
6
votes
2answers
2k views
DMZ subnet: to NAT or not to NAT?
I'm looking at setting up a DMZ behind a Cisco ASA that will contain a large number of HTTP front-end load balancers and SSL offload services - over 100 IPs, concentrated on a smaller number of hosts.
...
6
votes
2answers
1k views
Is there a secure way to allow IIS 7 in a DMZ to access a DB server behind the firewall?
Our network admins are adamant that it is insecure for our web servers, which are hosted in the DMZ, to access the DB server behind our firewall. To get round the problem, we access the data via web ...
1
vote
3answers
614 views
Blade Enclosure, Multiple Blade Servers, Whats the closest approximation to a DMZ?
I appreciate that to get a proper DMZ, one should have a physical separation between the DMZ servers and the LAN servers, with a firewall server in between.
But, in a network consisting of a single ...
6
votes
2answers
1k views
Virtual host on LAN - VMs on DMZ, separate NICs - is this a bad idea?
Just kicking this idea around, and wanted to see if you'll be so kind as to point out the problems I don't see.
If I set up this new HyperV host as a normal domain member, the benefits are obvious. ...
3
votes
1answer
602 views
Will you allow NetBIOS into your DMZ?
Is it secure for a firewall to allow NetBIOS connections from the internal network to the DMZ?
If not secure, what are the risks?
If secure, what is the FUD about and what are the counterarguments?
...
0
votes
0answers
40 views
connecting an ip on the remote machine via layer 2 to local machine
Ok, so this is part two of my main question:
So I have an ssh -w ethernet tunnel established.
previous question
run-setup:
source ./HOST
scp -i green.pem server/* root@$HOST:
ssh -i green.pem ...
0
votes
2answers
506 views
Reverse Proxy - should it be a different technology stack?
Got a skeptical question about a reverse proxy setup I'm considering.
I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
