Welcome to ISAserver.org

dmz setup proposal

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> dmz setup proposal

Page: [1]

Message

<< Older Topic Newer Topic >>

dmz setup proposal - 20.Sep.2006 3:15:53 PM

dejanbg

Posts: 2
Joined: 20.Sep.2006
Status: offline

Hello everybody,

In one segment of my company i have OU that is set up in folowing way:

ISP SDSL-ISA 2004 - Internal Network (192.168.100.0/24) (members and servers all together) with few publishing rulesto mail, ftp...
New requirements are (similiar like we have in other part of company, other building) that we create DMZ zone but in Way that front end server we set Linux box, and back end ISA 2004. We will have 2 SDSL lines so linux will be set for balancing that 2 links. In DMZ segment we will have some web servers. Internal network would be same for now.

What net diagram would you suggest and what Route relationship between segments, and should we put Servers on public IPs regarding we will have enough IPs or as i would maybe prefer to put in private segment.

I though to put something like
ISP1 & ISP2 -- 2 ext cards--Linux box--int dmz card (10.0.1.1/24 dns NA) -Switch with servers in DMZ -- DMZ card (10.0.1.2/24 dns NA)- ISA Server 2004--Int card1 (192.168.100.1/24 DNS private 192.168.100.2)

but i am not shure how much we are limited in situation 'need to publish some servers in Internal network' to be avaliable from Internet.

or maybe some parallel firewalls like mentioned in Tutorial with PIX and ISA 2004.

best regards,
and thanks in advance.
Dejan

Post #: 1

Featured Links*

RE: dmz setup proposal - 28.Oct.2006 3:25:54 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dejan,

There are lots of articles on this site on configuring DMZs.

Check this out:

http://www.isaserver.org/pages/search.asp?query=DMZ

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to dejanbg)

Post #: 2