[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] RES: [FW-1] What is recommended way to address a DMZ?



>If you use public addresses, you'll either have to obtain a new range of
public ips or subnet your existing range.
>If you have to subnet an existing range, my opinion is that using private
addresses and doing NAT will be easier.

Ok, thanks for your thoughts.

>I'll leave the debate about the relative security of Natted private
addresses versus public ips in the dmz to others in the list who have
definite opinions about that issue.

That is what I am really interested about, the security issues involved. Can
anyone share any insight on the subject?

Thanks,
F�bio.

>>> [email protected] 12/16/02 10:45AM >>>
Hi all,

I need to create a DMZ on my firewall and I have been thinking how I should
address it, the possibilities are:

1. Use public Internet addresses.
2. Use private addresses and do the required translations on the firewall.

What is the best to do? What are the pros and cons of each addressing
method? I would like to hear your opinions on the subject.

Thanks in advance,
F�bio Rocha.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================