Re: DMZ
- From: "cismic" <cismic@xxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 12 Nov 2001 17:58:47 -0800
I like the back to back DMZ approach. Problem is maintainability.
I keep my machines in the DMZ not as part of a AD setup so when I post
new content I make a new cd of the posted information
And get it propped to the production machines. It would be nice to have
a quicker method of using VSS to post new stuff however
That content now gets posted to a preproduction server where it is
tested once more before the cd is cut.
Joseph
-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Monday, November 12, 2001 3:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DMZ
http://www.ISAserver.org
Sonia,
A web server would be best positioned in the DMZ, as we all know
with Microsoft IIS 5.0, the get nailed lots. So I'd think that I would
protect my internal domain from this weakened area of the network. You
have 2 options,
1) A tri-homed set-up with three NIC's, and two separate address
blocks (one internal one external)
2) Go all the way and set-up 2 ISA servers, one to protect the
webserver, and one to be positioned behind it to protect the internal
client network.
I'm sure you can see which one is cheaper :)
As for which one is better ? Humm, there are likely 2 answers to that
one.
regards,
Mark
----- Original Message -----
From: "sonia urbaneja" <sonia_villadiego@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, November 12, 2001 11:29 AM
Subject: [isalist] Re: DMZ
> http://www.ISAserver.org
>
>
> One more question (sorry).
>
> If i would have a Web Server in the DMZ, ISA could be
> in my Internal Domain. I don´t know a good reason to
> install ISA in the DMZ.
>
> Can you explain it? =8^D
>
>
>
> --- Mark Strangways <strangconst@xxxxxxxx> escribió: >
> http://www.ISAserver.org
> >
> >
> > I'm not the expert that others are , but I don't see
> > any reason to set-up a
> > DMZ just for an SMTP relay.
> >
> > I may be wrong :)
> >
> > Mark
> > ----- Original Message -----
> > From: "sonia urbaneja" <sonia_villadiego@xxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Monday, November 12, 2001 11:11 AM
> > Subject: [isalist] Re: DMZ
> >
> >
> > > http://www.ISAserver.org
> > >
> > >
> > > Hi again,
> > >
> > > I only have in DMZ an SMTP Relay.
> > >
> > > Thanks for help.
> > >
> > >
> > > --- Mark Strangways <strangconst@xxxxxxxx>
> > escribió: >
> > > http://www.ISAserver.org
> > > >
> > > >
> > > > Depends on your specific network , do you have
> > web
> > > > severs, or mail server ?
> > > > Do you need the dmz for anything special ?
> > > >
> > > > More info would be needed I think .
> > > >
> > > > regards,
> > > > Mark
> > > > ----- Original Message -----
> > > > From: "sonia urbaneja"
> > <sonia_villadiego@xxxxxxxx>
> > > > To: "[ISAserver.org Discussion List]"
> > > > <isalist@xxxxxxxxxxxxx>
> > > > Sent: Monday, November 12, 2001 10:37 AM
> > > > Subject: [isalist] DMZ
> > > >
> > > >
> > > > > http://www.ISAserver.org
> > > > >
> > > > >
> > > > > Hi all,
> > > > >
> > > > > can anyone help me? I have ine doubt:
> > > > >
> > > > > is better to install ISA in a DMZ or inside a
> > > > domain?.
> > > > >
> > > > > Thanks in advanced.
> > > > >
> > > > >
> > > >
> > >
> >
> _______________________________________________________________
> > > > > Do You Yahoo!?
> > > > > Yahoo! Messenger
> > > > > Comunicación instantánea gratis con tu gente.
> > > > > http://messenger.yahoo.es
> > > > >
> > > > >
> > > >
> > >
> >
> ------------------------------------------------------
> > > > > You are currently subscribed to this
> > ISAserver.org
> > > > Discussion List as:
> > > > strangconst@xxxxxxxx
> > > > > To unsubscribe send a blank email to
> > > > $subst('Email.Unsub')
> > > > >
> > > >
> > > >
> > > >
> > >
> >
> ------------------------------------------------------
> > > > You are currently subscribed to this
> > ISAserver.org
> > > > Discussion List as: sonia_villadiego@xxxxxxxx
> > > > To unsubscribe send a blank email to
> > > $subst('Email.Unsub')
> > >
> > >
> >
> _______________________________________________________________
> > > Do You Yahoo!?
> > > Yahoo! Messenger
> > > Comunicación instantánea gratis con tu gente.
> > > http://messenger.yahoo.es
> > >
> > >
> >
> ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as:
> > strangconst@xxxxxxxx
> > > To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> >
> >
> ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> > Discussion List as: sonia_villadiego@xxxxxxxx
> > To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
> _______________________________________________________________
> Do You Yahoo!?
> Yahoo! Messenger
> Comunicación instantánea gratis con tu gente.
> http://messenger.yahoo.es
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
