Re: DHCP and web server in a DMZ or should we publish from the private network

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 28 Dec 2001 06:40:18 -0800

That depends on whether you're more concerned with:
1. the web server - keeping safe and secure is best served with web
publishing a private-side host
2. the private LAN - keeping it safe is best served by DMZ hosting the web
server.

HTH,
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the book!

----- Original Message -----
From: "Brian Harris" <bharris@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, December 27, 2001 20:14
Subject: [isalist] DHCP and web server in a DMZ or should we publish from
the private network


http://www.ISAserver.org


Hi,

I have a topic that I need some advice on.  I have a site (park) that is
open to the general public and they will be able to roam around the site
using wireless technology to log on to the proposed DMZ and will be issued
with an IP via DHCP and then as they move from one area to another they
will have different information available from a web server in the DMZ.

The wireless side is fine but I'm struggling on whether I need to set the
web server up in a DMZ or publish it from the private network.  My
security experience is smacking me in the face and saying no to the
private side publishing....!!!  As users will have valid private IP
address.

Has anyone done any work on this area?

Thanks in advance and this site is great!!!

Regards

Brian Harris


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: