Welcome to ISAserver.org

What is so good about DMZ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> DMZ >> What is so good about DMZ?

Page: [1]

Message

<< Older Topic Newer Topic >>

What is so good about DMZ? - 19.Jan.2005 5:26:00 PM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Hi, I have always wondered why DMZ is useful? Seems to me most if not all servers/PCs need to be protected nowadays. Pls advise, thks.

Post #: 1

Featured Links*

RE: What is so good about DMZ? - 25.Jan.2005 2:56:00 PM

smokeskull

Posts: 25
Joined: 28.Sep.2003
Status: offline

Generally, a DMZ is for servers that will be accessed by users or other machines on the internet. An example would be: You own a web server that is accessed by the public. Since this server may be compromised, you can limit the possible damage done by keeping it separate from your internal network. The DMZ is like a separate sandbox for external facing machines that keeps them cordoned off from your private network.

(in reply to Xuser)

Post #: 2

RE: What is so good about DMZ? - 25.Jan.2005 3:38:00 PM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Thks for the input. Yes, I knew DMZ is designed for such use. However, if for e.g. my webserver is at the DMZ, then it is opened for target practice ;-) Does the DMZ protects my webserver in some ways?

(in reply to Xuser)

Post #: 3

RE: What is so good about DMZ? - 25.Jan.2005 4:41:00 PM

ravindra

Posts: 39
Joined: 11.Aug.2002
From: India
Status: offline

You only advertise the minimum amount of services required by your servers in a DMZ network to the outerworld which should be protected by a firewall like ISA.

However in the case that the any system/systems do get compromised you minimize the damage/infection only to that particular network segment(i.e.the DMZ) thus effectively shielding your internal network which is only for internal use.

(in reply to Xuser)

Post #: 4

RE: What is so good about DMZ? - 26.Jan.2005 6:16:00 PM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Am I correct to say that DMZ is not widely used? Mainly because it requires more administration and maintenance work, which in turn is very time consuming?
So if I would to use a home based router, such as a Linksys router, to create a DMZ zone for my webserver, would it serves the same purpose as an ISA server does?

(in reply to Xuser)

Post #: 5

RE: What is so good about DMZ? - 26.Jan.2005 7:54:00 PM

ravindra

Posts: 39
Joined: 11.Aug.2002
From: India
Status: offline

NO...it does'nt...your Linksys router does'nt perform the application layer stateful packet inspection that ISA Performs. It merely advertises the services to the Internet with no application layer protection such as the one provided by ISA.

(in reply to Xuser)

Post #: 6