110 reputation
2520
bio website
location
age
visits member for 4 years, 7 months
seen May 17 '13 at 15:00

Sep
8
comment DMZ configuration and firewall throughput
I'm going to go with this configuration and create a "data" VLAN that the multi-homed webserver and database server will be the only members of.
Sep
8
comment DMZ configuration and firewall throughput
Only required ports would be open, regardless: the webserver and the MySQL server will be running host-based firewalls (not to mention they won't have services listening for any other ports). My point exactly re: the router/firewall in between: unless there's some ARP spoofing scenario I can't wrap my head around, if the webserver gets owned, it has the auth token to the database server and can (at the very least) read/write to all tables in the database.
Sep
7
comment DMZ configuration and firewall throughput
@Chris: I agree, it is an industry standard (at least as far as simplified high-level DMZ diagrams go), but I can't seem to locate any documentation that supports my throughput vs. perceived security angle I'm trying to unravel here.
Sep
7
comment DMZ configuration and firewall throughput
I corrected my question to say 150Mbps; thank you.
Sep
7
comment DMZ configuration and firewall throughput
That's the problem: we're going from a 1000Mb connection to a 100Mb connection; it would most likely be a bottleneck.
Sep
7
revised DMZ configuration and firewall throughput
added 564 characters in body
Sep
7
comment DMZ configuration and firewall throughput
What does that achieve? If the webserver gets rooted, it's on both networks.
Sep
5
awarded  Promoter
Sep
2
asked DMZ configuration and firewall throughput
Aug
5
comment Site-to-Site IPSec VPN: bridged only
Couldn't you do a combination of one bridged VPN IP that the rest of the office is NAT'ed behind?
Aug
5
revised Site-to-Site IPSec VPN: bridged only
added 162 characters in body
Aug
5
asked Site-to-Site IPSec VPN: bridged only
Aug
5
accepted Troubleshooting a “slow” network
Jul
11
awarded  Critic
Jul
4
comment Client computers would not connect to the Internet through Microsoft server 2008
What does ip config /all say on the client machines? Can the server itself get out on the Internet?
Jul
3
answered Always a path to the internet even in Windows SBS is off
Jul
2
accepted Cisco IOS: NAT overload for two WAN interfaces
Jul
2
revised Cisco IOS: NAT overload for two WAN interfaces
deleted 43 characters in body
Jul
2
answered Permission approval system
Jul
2
accepted Spam addressed to a sender but received by everyone else