NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] DMZ design



Hi all,

I'm having a slight doubt on my DMZ design. I'm running Nokia's IPSO 3.3 +
FW-1 4.1 SP3 with the following configuration:

Nokia box has 5 interfaces:

External
DMZ in
DMZ out
Hearbeat (VRRP)
Lan

Has anyone being able to configure the following: traffic from the internet
to the web server goes through the External interface, which routes it to
the DMZ in interface which then delivers the request to the web server. This
one is multi-homed as you probably have already guessed and has the default
gateway pointing to the firewall's DMZ out interface. The replies of the
request would therefore go to this interface. Didn't have the opportunity to
test it yet but will this work? Would I have to turn IP routing on the web
side for it to work? Thanks in advance.


Regards,

Francisco Cabral




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.