|
Art DeKneef -> Publishing server from DMZ vs Internal question (22.May2008 6:37:30 PM)
|
What are the differences between publishing a server to the Internet from the DMZ or Internal network? Is one more secure than the other?
Currently have ISA2004 Standard between internal and external. Client is going to be offering a new service to customers where they will log on to a webserver and upload files to the webserver. From the webserver the file will go to the processing server where the data will be stored in a SQL Express 2005 database.
According to the software vendor the processing server needs to access a share on the webserver. I want to be able to RDP to the webserver for management and have the webserver updated by the WSUS 3 server on the internal network.
Putting the webserver on the internal LAN by itself in a workgroup and publishing it from there is an option. It would make the connections between the two servers pretty easy.
Putting the webserver in the DMZ and publishing it from there is the other option. Though I think making the connections between internal and DMZ would take more work.
What are others thoughts on this?
Art
|
|
|
|