Welcome to ISAserver.org

Front End Firewall and AD

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Front End Firewall and AD

Page: [1]

Message

<< Older Topic Newer Topic >>

Front End Firewall and AD - 13.May2004 12:55:00 AM

Pheylan

Posts: 12
Joined: 5.May2004
From: Colorado, U.S.
Status: offline

Hi all,
I'm trying to determine what the best choice is for our network. We are migrating from a Linux IPtables based firewall to ISA server. We have several web and sql servers. I want to segment the web servers away from direct access to the sql servers. Is it better to have two firewalls, one in the front with external and perimeter interfaces, and another with perimeter and internal? Or should I just set up a trihomed firewall with external, perimeter, and internal? I'm looking for sort of a "best practices" sort of thing.
Thanks,
Kelly

Post #: 1

Featured Links*

RE: Front End Firewall and AD - 13.May2004 3:30:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Kelly,

A back to back firewall setup is always more secure than a trihomed config, because the trihomed config represents a single point of failure.

HTH,
Tom

(in reply to Pheylan)