|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Management server placement
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John, I used to have my management station in the protected network until I ran into some routing problems with remote firewalls. In order to solve the problems, I placed the MS in a DMZ. I have 3 DMZ's, and I placed it in the most secure of those DMZ's. The problem with placing it in an 'ordinary' DMZ with web servers, mail servers etc is that if one of those machines becomes compromised, it is possible to launch an attack from a compromised box to the management console. The DMZ I placed the MS in only has Cisco routers which encrypt traffic with other sites. The rules for that DMZ are very strict - only other routers are allowed to talk to my Cisco's (known by IP), and only a nominated GUI workstation is allowed to talk to the MS. This reduces the possibility of someone getting access to the MS and compromising your network. Craig. - -----Original Message----- From: John Gesualdi [mailto:[email protected]] Sent: Wednesday, 6 September 2000 12:52 a.m. To: fw Subject: [FW1] Management server placement Should the management server be on the internal network behind the Firewall module of should it be located on the DMZ network? Thanks. - -- John Gesualdi The Providence Journal Company PhonePagerCCDP,CCNP ====================================================================== ========== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ====================================================================== ========== -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> iQA/AwUBObTPFoAS1Tpq5ZYvEQKQHgCg9uvuL+mdzaR7dYtPeBlSpmMvpuMAn3FX pgN0cTuv31wcrwWnJsxSz+9Q =wqIj -----END PGP SIGNATURE----- ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
